Actions
Feature #36650
closedChange Linux password hashing default from sha256 to sha512
Status:
Closed
Priority:
Normal
Assignee:
Category:
Unattended installations
Target version:
Difficulty:
Triaged:
No
Actions
Added by Ewoud Kohl van Wijngaarden over 2 years ago. Updated over 1 year ago.
Applied in changeset foreman|e2dee7d6f7ffb505d317ca1b205f302ccd622063.
https://wiki.archlinux.org/title/SHA_password_hashes states that NSA has recommended SHA512 since RHEL 5. This means it's safe to do with wide compatibility. It should be noted that Fedora 35 has started to default to YESCRYPT. See ENCRYPT_METHOD in /etc/login.defs and https://www.fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow for more info.