Hacker News
points by mpyne 18 hours ago | 0 comments
musl does implement it this way.

However OpenSSH passes a different hash to musl’s crypt() than what it later uses to compare, so musl doesn’t switch to the alternate return output because from its perspective, it’s already guaranteed not to accidentally compare the same as the input hash.

Aún no hay comentarios.
Hacker News