Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!wuarchive!rex!uflorida!gatech!purdue!haven!ncifcrf!lhc!adm!smoke!gwyn From: gwyn@smoke.brl.mil (Doug Gwyn) Newsgroups: comp.unix.wizards Subject: Re: WARNING! Message-ID: <15927@smoke.brl.mil> Date: 21 Apr 91 00:17:28 GMT References: <1991Apr14.093305.12559@thunder.mcrcim.mcgill.edu> <1991Apr20.150213.23439@csusac.csus.edu> <1991Apr20.163540.23924@engin.umich.edu> Organization: U.S. Army Ballistic Research Laboratory, APG, MD. Lines: 8 In article <1991Apr20.163540.23924@engin.umich.edu> Mike O'Connor writes: >How would the passwords be recognized as such? Visual inspection? A UNIX password is "recognized" when it is found to encrypt to the known ciphertext. Note that for purposes of account cracking, any plaintext having this property will serve as a password just as good as the one you originally chose (in case there are multiple plaintexts that encrypt to the same ciphertext).