how work encryption in enable secret password?

[piergiorgio]

I have found that the enable secret password in my running-config $1$/sDd$.RpM6mkZIHOJAo52j01D10 is form by three part:

- magic part

- salt

- passwordhash

How work salt? What is the spedific function? How the router create the salt? Is the salt always different? Where is the digest MD5?

piergiorgiovenuti@libero.it

[owillins]

As far as I know the enable secret password is hashed using the stronger MD5 algorithm. I am not sure if there are 3 parts as mentioned by you. There is a document called ' Cisco IOS Password Encryption Facts'. You might want to take a look at it for clarifcations. Here is the link to the same.

http://www.cisco.com/en/US/tech/tk583/tk547/technologies_tech_note09186a00801d7efa.shtml

[piergiorgio]

thank you owillins, but I already know this document, I would like know more about the encryption method inside enable secret, this is similar to MD5 but isn't the same, what are different?

[pcomeaux]

Hi -

Here's a link that may help, titled "Cisco IOS Password Encryption Facts":

http://www.cisco.com/en/US/tech/tk583/tk547/technologies_tech_note09186a00801d7efa.shtml

This is as public as Cisco may get with regards to the password algorithm. This document was updated 4.22.2004.

Your account SE may be able to speak with you further about your concerns.

Hope this helps,

peter