function crypt_make_pw_salt may not be safe

mirror / busybox

BusyBox mirror

https://www.busybox.net/

Other

1.64k stars 617 forks source link

function crypt_make_pw_salt may not be safe #46

Open Jackey1024 opened 3 years ago

Jackey1024 commented 3 years ago

Function crypt_make_pw_salt in libbb/pw_encrypt.c file may not be safe. It generates salt from nanosecond values of system time and pid. It could be cracked.