busybox: switch to sha256 for passwd
authorPaul Spooren <mail@aparcar.org>
Fri, 19 Jan 2024 10:49:27 +0000 (11:49 +0100)
committerDaniel Golle <daniel@makrotopia.org>
Sat, 20 Jan 2024 13:22:58 +0000 (13:22 +0000)
Right now sha256 is considered more secure than md5, use it to harden
against password decryption.

Signed-off-by: Paul Spooren <mail@aparcar.org>
package/utils/busybox/Config-defaults.in

index 5ae8dd5622df863f46bdcabb96e2c09cba116eee..515bea3d1d742506332a9658d130cdd666266e4b 100644 (file)
@@ -1366,7 +1366,7 @@ config BUSYBOX_DEFAULT_CHPASSWD
        default n
 config BUSYBOX_DEFAULT_FEATURE_DEFAULT_PASSWD_ALGO
        string
-       default "md5"
+       default "sha256"
 config BUSYBOX_DEFAULT_CRYPTPW
        bool
        default n