Re: Security findings
Alejandro Colomar via Mutt-dev <[email protected]>
| Newsgroups | gmane.mail.mutt.devel |
|---|---|
| Message-ID | <aefltK6o4O8L6f_N@devuan> |
Hi Ian, On 2026-04-21T16:54:26+0100, Ian Collier via Mutt-dev wrote: > On Sun, Apr 19, 2026 at 07:38:05PM +0200, Alejandro Colomar via Mutt-dev wrote: > > Hmmm, I think crypt prints the hex values as text. That is, where > > mutt(1) would produce the value 0x1234, crypt would produce the string > > "1234" (more or less). > > The crypt(3) function, after generating the hash, outputs it in B64 format, > which is very similar to base64 but confusingly the alphabet is in a different > order (and has dot where base64 has plus). So yes, the output from crypt(3) > is guaranteed to be ASCII characters. Hmmm; this format should be documented in crypt(3), I think. Thanks! Have a lovely night! Alex > > Ian Collier. -- <https://www.alejandro-colomar.es>
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEES7Jt9u9GbmlWADAi64mZXMKQwqkFAmnn5jkACgkQ64mZXMKQ wqnGOw/+KvfhJF0Oyy6BoIdGxARkGD4rEMZkBQwM+pq4GF2R6PgKSV7m0P+J9Qwp RMBhdxyBlhhilMftPkRLdpxdwrsP0Chzizu4LA8RnH8cauLplvPYDvSVMDJvRR7I TAu9/fgtUHQKzOvkXSUJVLaUDhWpZuVX0KCUaH4A+zboAOfCRG35K0vPpChyqG9/ qjN6Q9q0K5ThZu2IJrxOvGkQS2xUZIoDpdnsE+DQ+xaXO6w45ipU6QTX6OycLPtJ gZMvcScMUobOlUkdPZHJdqAdR2Pcs0H69r3kkjxm4awD4xIlm4qOv5raTZuMD52h 7Iu7bMcV4pIIXyKVxFh9g5ejf8gyJgbJstw4dZi2OeZEQHF2rFl4bs5ZMjrysAtS U2XAkX+iD6bKT0cDwb49D0sE7iKwqrD1U5VELs8nTLaj/JlJc7yrpgXwDgA8h9MF daSePb0dvXf8BQJbRf8fHBk3JuL5pzuvWEhfvrK+hUAG9pGJmlWuAfV6OvGynY2k p+mUx7Waw0WAa9aiLHZheKEM5wDSFdf63WLLx6d/sORnYcnIp3HdJl8iFz4HNdFd j8F6WnwZY+kr4dUNNeTg242tyBN3hKYnStKUEZTr67CiiqXr7l+0d8txo0DBhxcS ywHEuOvwj/PjvMpT4BusS5Pjb2FZoCWMeTq4Bl2lHz0uv+n3UHk= =xMhh -----END PGP SIGNATURE-----