MD5 crypting

[NoOp]

On 04/27/2009 10:35 AM, Brian McKee wrote:
> On Mon, Apr 27, 2009 at 1:12 PM, NoOp <glgxg at sbcglobal.net> wrote:
>> On 04/26/2009 12:29 PM, Arda Eden wrote:
>>> The other interesting thing is every encryption with grub-md5-crypt for the
>>> same password generates different hashes.
>> It should give you different hashes each time.
> 
> Can you explain why it does that?  (I've confirmed you are indeed correct)
> Like the OP I would have thought it would be the same each time.
> For instance - this is the same every time.
>>  echo '<?php echo crypt("password", "xy") ?>' | php
>>  xyAjYtmfRYx/.
> 
> Is there a salt in there somewhere?  If so, how does grub know what the salt is?

http://www.usenix.org/events/usenix99/provos/provos_html/node10.html
[MD5crypt]

$ cat /usr/sbin/grub-md5-crypt

And you'll be able to see that the program does actually run/use md5crypt.