UNIX Password Security - Ten Years Later (1989)
| Venue: | CRYPTO'89 |
| Citations: | 44 - 0 self |
BibTeX
@INPROCEEDINGS{Feldmeier89unixpassword,
author = {David C. Feldmeier and Philip R. Karn},
title = {UNIX Password Security - Ten Years Later},
booktitle = {CRYPTO'89},
year = {1989},
pages = {44--63},
publisher = {Springer-Verlag}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Passwords in the UNIX operating system are encrypted with the crypt algorithm and kept in the publicly-readable file /etc/passwd. This paper examines the vulnerability of UNIX to attacks on its password system. Over the past 10 years, improvements in hardware and software have increased the crypts/second/dollar ratio by five orders of magnitude. We reexamine the UNIX password system in light of these advances and point out possible solutions to the problem of easily found passwords. The paper discusses how the authors built some high-speed tools for password cracking and what elements were necessary for their success. These elements are examined to determine if any of them can be removed from the hands of a possible system infiltrator, and thus increase the security of the system. We conclude that the single most important step that can be taken to improve password security is to increase password entropy.
Citations
No citations identified.
