Password Encryption Strength on HPUX 11.11

[Keith Imeson]

Hi,

What is the type of password encryption used on a trusted HPUX 11.11 system, configured using Bastille? Is it as strong as triple DES?

Thanks!

Maurice Lee
(maurice.leekienvong@gchq.gsi.gov.uk)

[Robert-Jan Goossens]

Hi Maurice,

-----

Hewlett-Packardâ s latest standard offering is HPUX 11i. Like SGI IRIX 6.5, HPUX
11i is certified to conform to the National Security Agency Information Systems
Security Organizationâ s Controlled Access Protection Profile, or Trusted
Computer Security Evaluation Criteria security level C2. HPUX 11i security
enhancements include:
· Stateful firewall software â IPFilter/9000
· Secure IP - IPSec/9000 (Supports AES, DES and 3DES encryption)
· Kerberos server
· Secure shell - SSH-1 or SSH-2 protocols
· Host intrusion detection software â IDS/9000
· AAA server â RADIUS support
· Stack buffer overflow protection
· A security hardening/lockdown tool - Bastille HP-UX
· Cryptographic hardware support
· Security patch check â Perl script [3]

-----

http://www.giac.org/certified_professionals/practicals/gsec/2580.php

Hope this helps,

Robert-Jan

Ps. I

[Steve Lewis]

The answer to that is 'whatever you want' since HP-UX now support Pluggable Authentication Modules (PAM).
Type 'man pam' for more info.

I suggest you go to CESG and ask them whether they have a suitable module that you can plug in and use.

[Keith Imeson]

Thanks for the help guys!