makekey(1m)
_________________________________________________________________
makekey
generate encryption key
_________________________________________________________________
SYNTAX
/usr/lib/makekey
DESCRIPTION
Makekey improves the usefulness of encryption schemes depending
on a key. It does this by increasing the amount of time required
to search the key space. Makekey reads 10 bytes from its
standard input, and writes 13 bytes on its standard output. The
output depends on the input in a way intended to be difficult to
compute (i.e., to require a substantial fraction of a second).
The first eight input bytes (the input key) can be arbitrary
ASCII characters. The last two (the salt) are best chosen from
the set of digits, uppercase and lowercase letters, period (.),
and slash (/). The salt characters are repeated as the first two
characters of the output. The remaining 11 output characters are
chosen from the same set as the salt and constitute the output
key.
The transformation performed is essentially the following: the
salt is used to select one of 4096 cryptographic machines, all
based on the National Bureau of Standards DES algorithm, but
modified in 4096 different ways. Using the input as a key, a
constant string is fed into the machine and recirculated a number
of times. The 64 bits that come out are distributed into the 66
useful key bits in the result.
Makekey is intended for programs that perform encryption (e.g.,
ed and crypt(1)). Its input and output are usually pipes.
SEE ALSO
crypt(1), ed(1).
DG/UX 4.00 Page 1
Licensed material--property of copyright holder(s)