1

By default, Solaris uses Traditional DES to encrypt password hashes in the shadow file.

Is there a way to harden the security by changing this default behaviour and make it to be hashed using a stronger algorithm?

2

You can choose the algorithm used between one of these (older Solaris releases might not have all of them available):

  • Traditional Unix crypt
  • BSD/Linux compatible md5
  • Blowfish
  • SHA256
  • SHA512

To change the algorithms accepted for existing passwords and used for new ones, modify the CRYPT_ALGORITHMS_ALLOW and CRYPT_DEFAULT variables in /etc/security/policy.conf file.

This is based on plugins so should you want custom encryption methods, you can install third party ones or develop your own.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.