/* * Copyright 1997 Niels Provos * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. All advertising materials mentioning features or use of this software * must display the following acknowledgement: * This product includes software developed by Niels Provos. * 4. The name of the author may not be used to endorse or promote products * derived from this software without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #include #include #include #include #include #include void to64( char *, long, int n); int pwd_gensalt(salt, max, pwd, type) char *salt; int max; struct passwd *pwd; char type; { char *bcrypt_gensalt __P((u_int8_t)); char option[LINE_MAX]; char *next, *now; *salt = '\0'; switch (type) { case 'y': pw_getconf(option, LINE_MAX, pwd->pw_name, "ypcipher"); break; case 'l': default: pw_getconf(option, LINE_MAX, pwd->pw_name, "localcipher"); break; } next = option; now = strsep(&next, ","); if (!strcmp(now, "old")) { if( max < 3 ) return 0; (void) srandom((int) time((time_t *) NULL)); to64(&salt[0], random(), 2); salt[2] = '\0'; } else if (!strcmp(now, "newsalt")) { if( max < 10 ) return 0; (void) srandom((int) time((time_t *) NULL)); salt[0] = _PASSWORD_EFMT1; to64(&salt[1], (long) (29 * 25), 4); to64(&salt[5], random(), 4); salt[9] = '\0'; } else if (!strcmp(now, "blowfish")) { int rounds = atoi(next); if (rounds < 4) rounds = 4; strncpy(salt, bcrypt_gensalt(rounds), max - 1); salt[max - 1] = 0; } else { strcpy(salt, ":"); warnx("Unkown option %s.", now); } return 1; } static unsigned char itoa64[] = /* 0 ... 63 => ascii - 64 */ "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; void to64(s, v, n) register char *s; register long v; register int n; { while (--n >= 0) { *s++ = itoa64[v&0x3f]; v >>= 6; } }