LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-17-2001, 04:44 AM   #1
yikaikai
LQ Newbie
 
Registered: Jul 2001
Posts: 9

Rep: Reputation: 0
Question how decode the passwd file's password?


anybody know it?
Please show
 
Old 07-17-2001, 05:00 AM   #2
jharris
Senior Member
 
Registered: May 2001
Location: Bristol, UK
Distribution: Slackware, Fedora, RHES
Posts: 2,243

Rep: Reputation: 47
Its one way encryption - there is noway to decrypt the passwd file. The only way you can really discover a password is to carry out a dictionary attack where you have a program encrypt every word in a 'dictionary' and then compare the encrypted word to each encrypted entry in the password file.

Buy why do you want to know about cracking a password file??

Jamie...

Last edited by jharris; 07-17-2001 at 05:04 AM.
 
Old 07-17-2001, 05:29 AM   #3
yikaikai
LQ Newbie
 
Registered: Jul 2001
Posts: 9

Original Poster
Rep: Reputation: 0
i only want to know how it been encrypted
 
Old 07-17-2001, 05:31 AM   #4
jharris
Senior Member
 
Registered: May 2001
Location: Bristol, UK
Distribution: Slackware, Fedora, RHES
Posts: 2,243

Rep: Reputation: 47
Have a read up on the unix crypt() function, that'll describe in depth how the encription works. Newer systems use a different algorithm I believe.

HTH

Jamie...
 
Old 07-23-2001, 02:17 AM   #5
cinnix
Member
 
Registered: Jun 2001
Location: Northern Ohio
Distribution: RedHat, Engarde and LFS
Posts: 237

Rep: Reputation: 30
You may have already seen this, but I wanted to piont it out since it was a great explanation. http://www.linuxquestions.org/questi...&threadid=4427
 
Old 07-23-2001, 05:17 AM   #6
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
Quote:
Originally posted by yikaikai
i only want to know how it been encrypted
Ok this is how it's been encrypted.
"DES 56bit"

DES is a block cipher--meaning it operates on plaintext blocks of a given size (64-bits) and returns ciphertext blocks of the same size. Thus DES results in a permutation among the 2^64 (read this as: "2 to the 64th power") possible arrangements of 64 bits, each of which may be either 0 or 1. Each block of 64 bits is divided into two blocks of 32 bits each, a left half block L and a right half R

DES works on bits, or binary numbers--the 0s and 1s common to digital computers. Each group of four bits makes up a hexadecimal, or base 16, number. Binary "0001" is equal to the hexadecimal number "1", binary "1000" is equal to the hexadecimal number "8", "1001" is equal to the hexadecimal number "9", "1010" is equal to the hexadecimal number "A", and "1111" is equal to the hexadecimal number "F".

DES works by encrypting groups of 64 message bits, which is the same as 16 hexadecimal numbers. To do the encryption, DES uses "keys" where are also apparently 16 hexadecimal numbers long, or apparently 64 bits long. However, every 8th key bit is ignored in the DES algorithm, so that the effective key size is 56 bits. But, in any case, 64 bits (16 hexadecimal digits) is the round number upon which DES is organized.

/Raz
 
Old 07-24-2001, 02:14 AM   #7
isajera
Senior Member
 
Registered: Jun 2001
Posts: 1,635

Rep: Reputation: 45
actually, it is possible to decrypt... as long as you have a few supercomputers handy and a few years to waste
 
Old 07-24-2001, 08:01 AM   #8
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
Actually no it's not possible to decrypt it.

When you decrypt something you follow a mathematical formula using some values "which is normally the secret key" which then gives you the plan text.

In this case it's a block cipher encryption with a secret key been the original text your trying to match.

So you're simply character matching the end encryption string to get the source plain text string.

That was my pedantic answer for the day.
 
Old 07-25-2001, 02:01 AM   #9
isajera
Senior Member
 
Registered: Jun 2001
Posts: 1,635

Rep: Reputation: 45
ok... i won't argue the point last time i disagreed with a moderator i was proved dramatically wrong.
 
Old 08-06-2001, 12:04 PM   #10
r3b00t
Member
 
Registered: May 2001
Distribution: OpenBSD 3.0-beta
Posts: 50

Rep: Reputation: 15
Newer systems may also support MD5 (Mine does :-), with the advantage of having a passwd that is longer than 8 chars and an even harder algorithm. This is done (I believe) by installing mcrypt, and editing /etc/login.defs
 
Old 08-07-2001, 04:13 AM   #11
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
Yes depending on what version of Linux you use.
Redhat 6.2 and above uses the MD5 hash algorithm.

RFC1321
"The algorithm takes as input a message of arbitrary length and produces as output a 128-bit "fingerprint" or "message digest" of the input.

It is conjectured that it is computationally infeasible to produce two messages having the same message digest, or to produce any message having a given prespecified target message digest.

The MD5 algorithm is intended for digital signature applications, where a large file must be "compressed" in a secure manner before being encrypted with a private (secret) key under a public-key cryptosystem such as RSA.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Howto change system password policies (passwd length, complexity) tisource Linux - Security 3 09-06-2005 12:01 AM
ow to create script change a user's password? passwd expects input from keyboard.. Arodef Linux - General 1 03-02-2005 10:40 PM
passwd: Bad password, too simplistic ??? qwijibow Linux - Security 2 02-05-2005 04:58 PM
passwd set password to blank - always fantunes Linux - Security 4 07-27-2004 06:41 AM
Bash script to edit passwd without Root password? NetFlash Linux - Newbie 2 11-29-2003 04:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:49 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration