Password security

Encryption 


Password encryption is ensured by the service called SHA-512 (Secure Hashing Algorithm 512 bits). It includes the protocols:

  • TLS
  • SSL
  • PHP
  • SSH
  • S/MIME
  • IPSec
SHA-512 is invoked with sha512sum. To see the encryption of the word "table":
$ echo -n table | sha512sum


Security enhancement

  • Password aging
    It sets the expiration date on a password, enabling its periodic replacement. The command to use is chage.

  • Forcing users to set strong passwords
    This can be done by using PAMPluggable Authentication Bodules. It is based on one of thefollowing libraries:
    • pam_cracklib.so
    • pam_passwdqc.so (provides more options


Comments