SYSKEY2. Request For Comments

[Luke Kenneth Casson Leighton]

On Fri, 4 Feb 2000 jeremy at valinux.com wrote:

> > 
> > On Sat, 5 Feb 2000, Nicolas Williams wrote:
> > 
> > > It's not a bad thing, but it's also not any more secure than the
> > > shadow idea.
> > 
> > it's _as_ secure.  that's good enough for me.
> > 
> > for the record, i'm taking in ideas at the moment, not implementations,
> > design brain-storming only, please.
> > 
> 
> But it's only *as* secure, plus 3000 lines of extra
> crypto code. What's the point ?

estimated 200, not 3000.  it avoids me having to lock two databases when
one will do.

it's still in the air, remember.  if i can't solicit or come up with a
good algorithm, then the algoritmhm _is: store the user passwords in a
separate database.

it's the best candidate so far.

luke