libxcrypt icon indicating copy to clipboard operation
libxcrypt copied to clipboard

Extended crypt library for descrypt, md5crypt, bcrypt, and others

Results 36 libxcrypt issues
Sort by recently updated
recently updated
newest added

The `test/explicit-bzero.c` test uses a start routine without any arguments. There is no need for the multi-argument version. This avoids a build failure with glibc and future compilers. The GNU...

See the [log](https://pkg-status.freebsd.org/beefy18/data/main-amd64-default/paac5a117b85a_s08efe9bef4/logs/libxcrypt-4.4.36.log). I think that you are using the *.map file with symbols that don't exist. Version: 4.4.36 FreeBSD 15

need more information
os-freebsd

snprintf returns negative values in case of errors, as found out by SAST (Static Application Security Testing)

This is motivated by the criticism in https://www.openwall.com/lists/yescrypt/2024/03/21/1 that our wording "CPU time cost" was misleading, given that with memory-hard methods it also affects memory usage. That's addressed in the...

argon2 is a password-hashing function that summarizes the state of the art in the design of memory-hard functions and can be used to hash passwords for credential storage, key derivation,...

For some operating systems, such as FreeBSD, struct crypt_data is defined in the unistd.h system header. In the error output below, libxcrypt's crypt.h is in /usr/local/include... In file included from...

bug
need more information
os-freebsd

As discussed in https://github.com/besser82/libxcrypt/pull/27#discussion_r213801730, the `.hash` macro has been changed somewhere between my revision in Owl (and its later life in ALT Linux?) and libxcrypt's to change the reporting for...

bug
help wanted
need more information
documentation

libxcrypt currently says "Openwall Project" in the footer, even though (as far as I can tell) it's not really maintained or assembled together into a crypt.3 implementation by the Openwall...

need more information
documentation

Compiling with -O3 on GCC tries to inline these function calls: https://github.com/besser82/libxcrypt/blob/72f75aa370ae96ccd2cc44ea3cf4182d8679ffbe/lib/alg-sha1.c#L265 https://github.com/besser82/libxcrypt/blob/72f75aa370ae96ccd2cc44ea3cf4182d8679ffbe/lib/alg-sha1.c#L267 This triggers an overflow warning on this line, which fails the build due to -Werror: https://github.com/besser82/libxcrypt/blob/72f75aa370ae96ccd2cc44ea3cf4182d8679ffbe/lib/alg-sha1.c#L244 Looking...

bug
help wanted

gcc 8.2.0 binutils 2.31.1 glibc 2.28 (with --disable-crypt) crosscompilation for aarch64, libxcrypt v4.1.1 configure --enable-shared --disable static If libxcrypt is built with lto in *flags almost all symbols are missing...

enhancement
help wanted