Sources for passwd command?

[Greg Allen]

Can someone point me to the sources for the passwd command?

I want to see how the encryption algorithms are called to generate the
entries in the password/shadow files.

I'd also like to look at the encryption code itself. I'm primarily
interested
in the blowfish encryption.

Can someone point me to where I can find the sources? Or is this the
wrong group for this question?

Thanks,

-- Greg Allen

[Paul Kimoto]

Post by Greg Allen
Can someone point me to the sources for the passwd command?

Which is your distribution? (I assume that you are not looking for
something related to the operating system that runs "Microsoft Outlook
Express 6.00.2900.2180".) Probably they provide packages with the source
code for your programs. On (some? most? all?) Linux systems the passwd
program comes from a package going by the name "shadow" (because the
passwords proper reside in /etc/shadow, not /etc/passwd).

[Lew Pitcher]

Post by Greg Allen
Can someone point me to the sources for the passwd command?
I want to see how the encryption algorithms are called to generate the
entries in the password/shadow files.

You /do/ realize that stored passwords are not /encrypted/, don't you?
What gets stored is a hash of the plaintext password, and as such cannot
be decrypted.

Post by Greg Allen
I'd also like to look at the encryption code itself. I'm primarily
interested in the blowfish encryption.

Then you are probably going to have to look elsewhere. The crypt(3)
function that hashes passwords for storage uses DES (according to the
manpage) or MD5 (according to the documentation) not blowfish.

Post by Greg Allen
Can someone point me to where I can find the sources? Or is this the
wrong group for this question?

The source for crypt(3) is part of glibc. You can find glibc at
http://www.gnu.org/software/libc/libc.html

You might want to read the current doc at
http://www.gnu.org/software/libc/manual/html_node/crypt.html#crypt

- --

Lew Pitcher, IT Specialist, Enterprise Data Systems
Enterprise Technology Solutions, TD Bank Financial Group

(Opinions expressed here are my own, not my employer's)