You probably weren't aware, but your #Linux crypt(5) supports the following #password hashing functions (in addition to some others):
- bcrypt ($2b$)
- scrypt ($7$)
- yescrypt ($y$)
You should definitely migrate to one of those password hashing functions over the risky sha256crypt / sha512crypt which is default on most distros.
#cryptography #security #passwords
https://pthree.org/2018/05/23/do-not-use-sha256crypt-sha512crypt-theyre-dangerous/
@ptman I dug deeper. Argon2 support was requested to the linux-pam project in 2018, to which the devs responded that it needs to be in libxcrypt first.
https://github.com/linux-pam/linux-pam/issues/45
A pull request has been submitted to libxcrypt in 2020, but it appears there are some issues with the code. As such, the PR remains open.
@ptman Good question. I don't know why that wasn't (hasn't?) been implemented.