[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: cvspass - obtaining the password

From: Jim.Hyslop
Subject: RE: cvspass - obtaining the password
Date: Fri, 23 Jul 2004 11:54:26 -0400

Lee wrote:
> I'm trying to assess our systems security, and I'm looking at 
> CVS right 
> now. I cam across an article, `Securing CVS on OpenBSD` 
> [
> a-secure-cvs.pdf] 
> that the password in .cvspass can be obtained easily as the 
> encryption 
> algorithm is well-known and reverisble.
> Can anyone direct me to more information / the algorithm? A Google 
> search isn't helping.
Use the source, Lee!

It's a very simple substitution algorithm. The substitution table is in the
source code, in scramble.c

Jim Hyslop
Senior Software Designer
Leitch Technology International Inc. (
Columnist, C/C++ Users Journal (

reply via email to

[Prev in Thread] Current Thread [Next in Thread]