Skip to contentSkip to conversation

password -md5 in grub.conf/menu.lst

dm-crypt ken 2 participants 3 messages Aug 17, 2011

lore
Share & tools
lore

ken

author
#0 lore raw

In grub/menu.lst file my /boot partition is a line like this:

password --md5 $1$Mb9vxXPV$pAbcdTxr4Twh32XXgns2/

The last bit is 35 characters long.

Is this the hash digest of the passphrase? Is the final slash character (/) just another character or is it in some way especially significant?

tnx

#1 lore raw

This seems to be a config file option of grub-md5-crypt, and has nothing to do with cryptsetup, dm-crypt or LUKS.

If I understand the documentation correctly, this is an md5-ed password that either secures interactive Grub mode or prevents script continuation before password entry.

The format seems to be the same as in /etc/shadow
for md5 passwords. You can read up on it here:

http://en.wikipedia.org/wiki/Shadow_password

Arno

Quoted 17 lines · ken

In grub/menu.lst file my /boot partition is a line like this:

password --md5 $1$Mb9vxXPV$pAbcdTxr4Twh32XXgns2/

The last bit is 35 characters long.

Is this the hash digest of the passphrase? Is the final slash character (/) just another character or is it in some way especially significant?

tnx
_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

Signature · 7 lines
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: [email protected] 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier 
#2 lore raw

P.S.: The "/" is an artefact of the encoding, no special
meaning. It can be one of 4 characters. The hash gets patted by "1111" (binary) at the end.

Quoted 48 lines · Arno Wagner

This seems to be a config file option of grub-md5-crypt, and has nothing to do with cryptsetup, dm-crypt or LUKS.

If I understand the documentation correctly, this is an md5-ed password that either secures interactive Grub mode or prevents script continuation before password entry.

The format seems to be the same as in /etc/shadow
for md5 passwords. You can read up on it here:

http://en.wikipedia.org/wiki/Shadow_password

Arno

Quoted 17 lines · ken

In grub/menu.lst file my /boot partition is a line like this:

password --md5 $1$Mb9vxXPV$pAbcdTxr4Twh32XXgns2/

The last bit is 35 characters long.

Is this the hash digest of the passphrase? Is the final slash character (/) just another character or is it in some way especially significant?

tnx
_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

Signature · 11 lines
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: [email protected] 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier 
_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt
Signature · 7 lines
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: [email protected] 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier