By default, Solaris uses Traditional DES to encrypt password hashes in the shadow file.
Is there a way to harden the security by changing this default behaviour and make it to be hashed using a stronger algorithm?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
You can choose the algorithm used between one of these (older Solaris releases might not have all of them available):
To change the algorithms accepted for existing passwords and used for new ones, modify the
CRYPT_DEFAULT variables in
This is based on plugins so should you want custom encryption methods, you can install third party ones or develop your own.