Password Encryption

[Joyce S. Solomon_1]

Hi All,

Hav a question here, thanks in advance.

Is the password which is transferred in HP UX is one way or two ways encrypted?

Thanks

[Patrick Wallek]

What do you mean "the password which is transferred in HP UX"?

If you are talking about the password going over the network when someone logs in via telnet or ftp then there is NO encryption. The password goes over the network as clear-text.

The password in the password file is encrypted via the crypt command. See 'man crypt' for more info.

[Animesh Chakraborty]

crypt() is the password encryption function. It is based on a one way
hashing encryption algorithm with variations intended (among other
things) to frustrate use of hardware implementations of a key search.

[Jeff Schussele]

Hi Joyce,

The password in HP-UX is stored with a single encryption method - crypt as others have pointed out.

Also as they've stated it's transmitted in clear text during normal access methods across the network.

If you want encrypted transmission of the PW, then you need to use openssh as your access method - found at:

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/openssh-3.4p1/

HTH,
Jeff