Skip to main content

Posts

Showing posts with the label sha

crypt(3) $6$ password hash algorythm (based on SHA-512) in Java?

I'm looking for a Java function to generate/verify password hashes that were encoded in the way crypt(3) does when storing them in the Linux /etc/shadow file if sha512 is activated in /etc/pam.d/common-password. E.g. the plaintext string "geheim" will translate to: "$6$WoC532HB$LagBJ00vAGNGu8p9oeYDOSNZo9vTNTzOgPA.K0bJoiXfbcpj3jBuTkNwdzCrSNadRi8LanH1tH6tGGPPp/Lp3." From http://www.akkadia.org/drepper/SHA-crypt.txt I understand that, like with MD5, it's not just a SHA hash like DigestUtils or the Java MessageDigest classes produces but an algorithm that does a bit more magic.