src/lib/libcrypt/crypt-md5.c, branch release/13.1.0

lib: further adoption of SPDX licensing ID tags.

2017-11-26T02:00:33+00:00

Mainly focus on files that use BSD 2-Clause license, however the tool I
was using mis-identified many licenses so this was mostly a manual - error
prone - task.

The Software Package Data Exchange (SPDX) group provides a specification
to make it easier for automated tools to detect and summarize well known
opensource licenses. We are gradually adopting the specification, noting
that the tags are considered only advisory and do not, in any way,
superceed or replace the license texts.

Make libcrypt thread-safe. Add crypt_r(3).

2016-08-10T15:16:28+00:00

glibc has a pretty nice function called crypt_r(3), which is nothing
more than crypt(3), but thread-safe. It accomplishes this by introducing
a 'struct crypt_data' structure that contains a buffer that is large
enough to hold the resulting string.

Let's go ahead and also add this function. It would be a shame if a
useful function like this wouldn't be usable in multithreaded apps.
Refactor crypt.c and all of the backends to no longer declare static
arrays, but write their output in a provided buffer.

There is no need to do any buffer length computation here, as we'll just
need to ensure that 'struct crypt_data' is large enough, which it is.
_PASSWORD_LEN is defined to 128 bytes, but in this case I'm picking 256,
as this is going to be part of the actual ABI.

Differential Revision:	https://reviews.freebsd.org/D7306

Tidy the code up a fraction. Re-release with a 2-clause BSD license

2003-06-02T21:43:14+00:00

with the kind permission of the author/copyright holder.

Thanks to:	phk

Fix grammer in comment.

2002-03-25T15:55:36+00:00

Submitted by:	Engin Gunduz

Modernize my email-address.

2002-03-25T13:48:53+00:00

Darn. There is (now was) a signed/unsigned issue that resulted in a

2002-03-07T10:41:11+00:00

very long loop.

Reported by:	nnd@mail.nsk.ru (Nickolay Dudorov)

No functional change, but big code cleanup. WARNS, lint(1) and style(9).

2002-03-06T17:18:09+00:00

Implement __FBSDID()

2001-09-16T21:35:07+00:00

Removed duplicate VCS ID tags, as per style(9).

2001-08-13T14:06:34+00:00

Merge into a single US-exportable libcrypt, which only provides

2000-12-28T10:32:02+00:00

one-way hash functions for authentication purposes.  There is no more
"set the libcrypt->libXXXcrypt" nightmare.
- Undo the libmd.so hack, use -D to hide the md5c.c internals.
- Remove the symlink hacks in release/Makefile
- the algorthm is set by set_crypt_format() as before.  If this is
  not called, it tries to heuristically figure out the hash format, and
  if all else fails, it uses the optional auth.conf entry to chose the
  overall default hash.
- Since source has non-hidden crypto in it there may be some issues with
  having the source it in some countries, so preserve the "secure/*"
  division.  You can still build a des-free libcrypt library if you want
  to badly enough.  This should not be a problem in the US or exporting
  from the US as freebsd.org had notified BXA some time ago.  That makes
  this stuff re-exportable by anyone.
- For consistancy, the default in absence of any other clues is md5.  This
  is to try and minimize POLA across buildworld where folk may suddenly
  be activating des-crypt()-hash support.  Since the des hash may not
  always be present, it seemed sensible to make the stronger md5 algorithm
  the default.
All things being equal, no functionality is lost.

Reviewed-by: jkh

(flame-proof suit on)