[Dovecot] salted passwords

[Timo Sirainen]

On 15.2.2010, at 19.42, Leonardo Rodrigues wrote:

>    from sources on src/auth i can find some interesting informations:
> 
> /* format: <SHA1 hash><salt> */
> 
> and
> 
> #define SSHA256_SALT_LEN 4
> 
> so the salt really seems to be 4-byte (which in fact are 8 when watching in hexadecimal), the exact difference on dovecotpw non-salted and salted generated passwords.

The generated SSHA256 passwords have 4 byte salt, but Dovecot supports reading any salt length.