Bug 818741 - Do not fall back to MD5 when crypt() falls its hashing algo
Summary: Do not fall back to MD5 when crypt() falls its hashing algo
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: pam
Version: 17
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-05-03 20:10 UTC by Paul Wouters
Modified: 2012-05-24 08:20 UTC (History)
1 user (show)

Fixed In Version: pam-1.1.5-7.fc18
Clone Of:
Environment:
Last Closed: 2012-05-24 08:20:03 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
patch disabling MD5 fallback (3.05 KB, patch)
2012-05-03 20:11 UTC, Paul Wouters 		no flags Details | Diff
View All

Description Paul Wouters 2012-05-03 20:10:05 UTC 
Description of problem:
There is fallback code that uses crypt() in DES mode when it fails to work with another hashing algorithm via the $x$ salt argument passing.

In fips mode when MD5 is not allowed using a salt of $1$ (for MD5) results in crypt() returning NULL, and the fallback using the even worse then MD5 algo of single DES.
Comment 1 Paul Wouters 2012-05-03 20:11:51 UTC 
Created attachment 581954 [details]
patch disabling MD5 fallback
Comment 2 Paul Wouters 2012-05-03 20:12:49 UTC 
Slight correction, the fallback is to MD5 not DES, and it happens when the FIPS check fails for sha256/sha512.
Note You need to log in before you can comment on or make changes to this bug.