john the ripper for private keys?

From: Bernd Schubert (bernd-schubert_at_web.de)
Date: 03/15/04

  • Next message: Darren Dunham: "Re: use openssh in script for timeout" 
    Date: Mon, 15 Mar 2004 17:56:30 +0100

    Hi,

    I would like to check the private keys of all users for empty or too easy
    passwords. Does someone here knows a program or method how to do this?

    IMHO, administrators should really be able to disallow empty passphrases for
    keys used by the ssh-agent! Currently this seems not to be possible, so I'm
    looking for a method how to check it.

    Actually I think it would be pretty easy to make ssh-add and ssh-agent not
    to like empty or too easy passwords as default (the same way as most
    passwd's currently do).

    Thanks,
            Bernd

  • Next message: Darren Dunham: "Re: use openssh in script for timeout"

    Relevant Pages

    • Re: gdm login without password
      ... > Is there any functionality in gdm that allows users with empty ... I just want users with empty passwords to be able ... > which gdm doesn't let me do in its default configuration (I'm using gdm ...
      (Debian-User)
    • Re: john the ripper for private keys?
      ... >>to like empty or too easy passwords as default (the same way as most ... passwords usually don't patch programs to be able to use weak passwords, ... even empty passwords for their keys. ...
      (comp.security.ssh)
    • Cant store passwords for external share point portal (NTLM)
      ... we're having a problem getting IE to remember the passwords ... for a share-point portal site that's on another location ... Strangely enough the username does appear under WindowsXP ... password there and click ok and return it will be empty again. ...
      (microsoft.public.windows.inetexplorer.ie6.setup)
    • gdm login without password
      ... Is there any functionality in gdm that allows users with empty ... I just want users with empty passwords to be able ...
      (Debian-User)