Encrypting long passwords

[TheDeerHunter]

There is a known limitation in the Perl 'crypt' function - the result
of
a call to crypt is sensitive only to the first eight characters of the
encrypted string.

E.g., the two following calls will both result in: '<b>san3ikkE.ivL2'</
b>:

crypt ('wordword', 'salt');
crypt ('wordwordword', 'salt');

Can someone recommend a Perl module that would be useful
to implement encryption of long passwords, in such way that
the result of the two calls above would differ?

Strength similar to that of crypt or better is OK.

 

[Josef Moellers]

There is a known limitation in the Perl 'crypt' function - the result
of
a call to crypt is sensitive only to the first eight characters of the
encrypted string.

E.g., the two following calls will both result in: '<b>san3ikkE.ivL2'</
b>:

crypt ('wordword', 'salt');
crypt ('wordwordword', 'salt');

Can someone recommend a Perl module that would be useful
to implement encryption of long passwords, in such way that
the result of the two calls above would differ?

Strength similar to that of crypt or better is OK.

Look Ma, I can use google: "perl encrypt password"
First hit contains "Crypt:asswdMD5", go to CPAn, find Crypt-PasswdMD5-1.3

 

[TheDeerHunter]

Look Ma, I can use google: "perl encrypt password"
First hit contains "Crypt:asswdMD5", go to CPAn, find Crypt-PasswdMD5-1.3

Jozef, thanks for the tip.
I can google too - actually did it quite a lot before posting.

I did looking at Crypt-PasswdMD5-1.3 on
http://search.cpan.org/dist/Crypt-PasswdMD5-1.3/PasswdMD5.pm

Didn't see there anything about length, folding passwords etc. - so
the only
way to know is to try it.

And then .. I thought .. wait Ma - maybe there is a guy out there who
knows?
And then I posted my question.

 

[TheDeerHunter]

Now I actually tried it - and I do see that Crypt:asswdMD5 does the
job and creates encrypted strings that are sensitive to length of
input string greated than 8.

Again, thanks for the tip.

 

[Josef Moellers]

Now I actually tried it - and I do see that Crypt:asswdMD5 does the
job and creates encrypted strings that are sensitive to length of
input string greated than 8.

Again, thanks for the tip.

You're welcome. Sorry if my response was a little too rough. I tend to
get carried away, lately. Need to adjust my medication ;-)

Josef

 

[bytebro]

Look Ma, I can use google: "perl encrypt password"
First hit contains "Crypt:asswdMD5", go to CPAn, find Crypt-PasswdMD5-1.3

Strictly speaking, that will not 'encrypt' the password/phrase, it
will hash it. A hash is one-way, whereas encryption is reversible.

BTW, if a hash is what the OP needs, MD5 is pretty much considered
'broken' these days; most crypto-dudes are recommending SHA2 for new
stuff. For reversible encryption, it's AES. There are modules on
CPAN for each.