|
|
1.1 root 1: .TH MAKEKEY 8
2: .CT 1 sa_nonmortals
3: .SH NAME
4: makekey \- generate encryption key
5: .SH SYNOPSIS
6: .B /usr/lib/makekey
7: .SH DESCRIPTION
8: .I Makekey
9: improves the usefulness of encryption schemes depending on a key by
10: increasing the amount of time required to search the key space.
11: It
12: reads 10 bytes from its standard input, and writes 13 bytes on its
13: standard output.
14: The output depends on the input in a way intended to
15: be difficult to compute (i.e. to require a substantial fraction of a
16: second).
17: .PP
18: The first eight input bytes
19: (the
20: .IR "input key" )
21: can be arbitrary
22: .SM ASCII
23: characters.
24: The last
25: two (the
26: .IR salt )
27: are best chosen from the set of digits, upper- and lower-case
28: letters,
29: .L .
30: and
31: .LR / .
32: The salt characters are repeated as the first two characters of the output.
33: The remaining 11 output characters are chosen from the same set as the salt
34: and constitute the
35: .I "output key."
36: .PP
37: The salt is used to select one of 4096 cryptographic
38: machines all based on the National Bureau of Standards
39: .SM DES
40: algorithm, but modified in 4096 different ways.
41: Using the input key as key,
42: a constant string is fed into the machine and recirculated
43: a number of times.
44: The 64 bits that come out are distributed into the
45: 66 useful key bits in the result.
46: .PP
47: .I Makekey
48: is intended for programs, such as
49: .IR crypt (1),
50: that perform encryption.
51: Usually its input and output will be pipes.
52: .SH SEE ALSO
53: .IR crypt (1)
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.