Cisco password implementation trubs: weakened strength?

jamie rishaw j at arpa.com
Thu Mar 21 10:10:36 UTC 2013


warning: I'm tired and this email is terse.
warning: for huge nerds only.
disclaimer: although I've worked with actual rocket scientists(hi Roger),
I'm. not one myself..nor am I a crypto mathnerd

apparently, Cisco is changing its password schemas.

old: pbkdf2 by 1k, salted
vs
New: (type 4) unsalted sha256
..
discuss.?

there is a cert and Cisco sa on this.. but I'm wondering if anyone has any
opinions, yea or nay.?

-j.



More information about the NANOG mailing list