Generare l'hash di una password

Tipi di Hash

Gli hash possono essere crypot (non usato ), MD5 o SHA1

Esempio

mkpasswd -m SHA-512 test

Si ottiene

$6$EUEoZKNThDNKmfdb$3g5AuZFmWHCaDJDJq2GVPdLQ8CAOPdDUGFYTf.T7SMbgk9aK2fyoo5EQlAZhfW.SEs11S4GYLNxX/RR5yxFUy.

Che è spezzabile in

Algoritmo (1=MD5, 6=SHA1)

$6

Salt

$EUEoZKNThDNKmfdb

Hash

$3g5AuZFmWHCaDJDJq2GVPdLQ8CAOPdDUGFYTf.T7SMbgk9aK2fyoo5EQlAZhfW.SEs11S4GYLNxX/RR5yxFUy.

Se si vuole che l'hash sia sempre lo stesso, occorre usare lo stesso salt nella generazione.

cdenley@cdenley:~$ mkpasswd -m SHA-512 test
$6$SWunIV3lT3K52WKw$SpsARBUReIAbJ0pd0r.aFi9yj9AtIww9NFSNkFKTQgDGGY0GRQPagwm9bdKn1dndJw3XSy5AB6zWQK/D82a5p.
cdenley@cdenley:~$ mkpasswd -m SHA-512 test nonrandom
$6$nonrandom$y6NEeles.nw6ECcrMVQCj5JjX1ahluaLkbNsl/XD1l4ViGm1prkjkATSeZCaLlS7wWulmgIq.OR4sh.QrTOqe/
cdenley@cdenley:~$ mkpasswd -m SHA-512 test nonrandom
$6$nonrandom$y6NEeles.nw6ECcrMVQCj5JjX1ahluaLkbNsl/XD1l4ViGm1prkjkATSeZCaLlS7wWulmgIq.OR4sh.QrTOqe/

Con openssl

• Hash crypt

openssl passwd -crypt

echo "lapassword" | openssl passwd -crypt -stdin

• Hash MD5

openssl passwd -1

echo "lapassword" | openssl passwd -1 -stdin

• Vedi man 1ssl passwd

Con mkpasswd

sudo aptitude install mkpasswd

• Hash crypt

mkpasswd -m des

echo "lapassword" | mkpasswd -m des -s

• Altri hash:

des	standard 56 bit DES-based crypt(3)
md5	MD5
sha-256	SHA-256
sha-512	SHA-512

• Vedi mkpasswd --help

Riferimenti

• How to create encrypted password via command line
• Ubuntu Forums - View Single Post - [ubuntu Ubuntu's Password Encryption]