Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does the encryption used in the passwd and RC@encrypt use a server-specific seed ?

April 26, 2017encryption passwd seed Used

0

Posted

Does the encryption used in the passwd and RC@encrypt use a server-specific seed ?

1 Answer

0

Posted

The encryption performed in the server uses a “seed” found in the config.ini file: Public Key = Sambar Server Encryption Key. This key can be modified to ensure that encryption on the server is different on each server installation; modifying this key affects all passwd entries as well as RC@encrypt function calls. The one drawback to changing htis key is that the sacrypt and htpasswd utilities have this seed hard-coded in them. A future release will permit these utilities to be passed in an arbritrary seed.