Project

General

Profile

Actions

Feature #36650

closed

Change Linux password hashing default from sha256 to sha512

Added by Ewoud Kohl van Wijngaarden 11 months ago. Updated 6 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Unattended installations
Target version:
-
Fixed in Releases:
Found in Releases:

Related issues 1 (1 open0 closed)

Related to Foreman - Feature #37614: Use SHA512 for root password hashing when no OS is setReady For TestingEwoud Kohl van WijngaardenActions
Actions #1

Updated by The Foreman Bot 23 days ago

  • Status changed from New to Ready For Testing
  • Assignee set to Marek Hulán
  • Pull request https://github.com/theforeman/foreman/pull/10206 added
Actions #2

Updated by The Foreman Bot 17 days ago

  • Fixed in Releases 3.12.0 added
Actions #3

Updated by Marek Hulán 17 days ago

  • Status changed from Ready For Testing to Closed
Actions #4

Updated by The Foreman Bot 17 days ago

  • Pull request https://github.com/theforeman/foreman/pull/10214 added
Actions #5

Updated by Marek Hulán 11 days ago

  • Tracker changed from Feature to Bug
  • Description updated (diff)
  • Status changed from Closed to New
  • Red Hat JIRA set to SAT-26071
Actions #6

Updated by Marek Hulán 11 days ago

  • Tracker changed from Bug to Feature
  • Status changed from New to Closed
Actions #7

Updated by Marek Hulán 11 days ago

https://wiki.archlinux.org/title/SHA_password_hashes states that NSA has recommended SHA512 since RHEL 5. This means it's safe to do with wide compatibility. It should be noted that Fedora 35 has started to default to YESCRYPT. See ENCRYPT_METHOD in /etc/login.defs and https://www.fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow for more info.

Actions #8

Updated by The Foreman Bot 6 days ago

  • Fixed in Releases 3.11.1 added
Actions #9

Updated by Ewoud Kohl van Wijngaarden 5 days ago

  • Related to Feature #37614: Use SHA512 for root password hashing when no OS is set added
Actions

Also available in: Atom PDF