[161624] in North American Network Operators' Group
Cisco password implementation trubs: weakened strength?
daemon@ATHENA.MIT.EDU (jamie rishaw)
Thu Mar 21 06:10:50 2013
In-Reply-To: <CABL6YZSA6-CE3naCLmFzK=SYF_TcwTn7hjH_+3VuKU5NzgESjA@mail.gmail.com>
Date: Thu, 21 Mar 2013 05:10:36 -0500
From: jamie rishaw <j@arpa.com>
To: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
warning: I'm tired and this email is terse.
warning: for huge nerds only.
disclaimer: although I've worked with actual rocket scientists(hi Roger),
I'm. not one myself..nor am I a crypto mathnerd
apparently, Cisco is changing its password schemas.
old: pbkdf2 by 1k, salted
vs
New: (type 4) unsalted sha256
..
discuss.?
there is a cert and Cisco sa on this.. but I'm wondering if anyone has any
opinions, yea or nay.?
-j.
