Re: [Dovecot] weakness in hash salt generation

On 23.7.2004, at 20:11, Joshua Goodall wrote:

Dovecot has routines for password hashing; two of these, crypt_generate and md5_generate, both use sizeof(salt_chars) when reducing a random string to salt.

So it seems. But how did you notice it? I don't think those functions are ever called by Dovecot itself? They're there just in case some day they would be useful..