Rust Password Hashing: Cracking the Shadows

In this video I teach about password hashing by Cracking the /etc/shadow linux file
CODE: https://github.com/masmullin2000/shadow_password_hashing
----

Rust Crypto Project: https://github.com/RustCrypto

sha512_crypt in Rust: https://github.com/RustCrypto/password-hashes/blob/master/sha-crypt/src/lib.rs

Description of sha-crypt: https://www.akkadia.org/drepper/SHA-crypt.txt

NIST 800-132: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf

NIAP Mobile Device Security Guidelines: https://www.niap-ccevs.org/MMO/PP/455/mobile-device-release.htm#FCS_COP.1.1/CONDITION

Argument Against sha-crypt: https://pthree.org/2018/05/23/do-not-use-sha256crypt-sha512crypt-theyre-dangerous/

glibc's crypt function: https://man7.org/linux/man-pages/man3/crypt.3.html

Shadow File Format: https://www.cyberciti.biz/faq/understanding-etcshadow-file/

AUR Wordlists: https://aur.archlinux.org/packages/wordlists

Видео Rust Password Hashing: Cracking the Shadows канала Michael Mullin