diff --git a/reference/xpass/constants.xml b/reference/xpass/constants.xml index a2763165b4..fe9989e0cb 100644 --- a/reference/xpass/constants.xml +++ b/reference/xpass/constants.xml @@ -157,6 +157,45 @@ + + + CRYPT_PREFIX_SM3CRYPT + (string) + + + + A hash based on the ShangMi 3 hash function with 256-bit output, + that uses the same design as sha256crypt and/or sha512crypt. + Supported on EulerOS, Kylin, openEuler, and openKylin, but not common + elsewhere. Acceptable for new hashes where required. The default + processing cost parameter is 5000, which is too low for modern hardware. + + + Available as of 1.2.0 with libcxcrypt >= 4.5.0. + + + + + + CRYPT_PREFIX_SM3_YESCRYPT + (string) + + + + Sm3-yescrypt uses the output from yescrypt as an input message to HMAC + with the ShangMi 3 hash function with a 256-bit digest. Thus, yescrypt's + cryptographic properties are superseded by those of the ShangMi 3 hash + function. This hashing method is useful in applications that need modern + passphrase hashing, but have to rely on algorithms approved by the Chinese + Office of State Commercial Cryptography Administration (OSCCA). The ShangMi + 3 hash function has been published in Part 3: "Dedicated hash-functions" + of the ISO/IEC 10118-3:2018. Acceptable for new hashes where required. + + + Available as of 1.2.0 with libcxcrypt >= 4.5.0. + + + @@ -228,7 +267,7 @@ PASSWORD_SHA512 is used to create new password - hashes using the CRYPT_SHA512 algorithm. + hashes using the CRYPT_PREFIX_SHA512 algorithm. @@ -240,7 +279,37 @@ PASSWORD_YESCRYPT is used to create new password - hashes using the CRYPT_YESCRYPT algorithm. + hashes using the CRYPT_PREFIX_YESCRYPT algorithm. + + + + + + PASSWORD_SM3CRYPT + (string) + + + + PASSWORD_SM3CRYPT is used to create new password + hashes using the CRYPT_PREFIX_SM3CRYPT algorithm. + + + Available as of 1.2.0 with libcxcrypt >= 4.5.0. + + + + + + PASSWORD_SM3_YESCRYPT + (string) + + + + PASSWORD_SM3_YESCRYPT is used to create new password + hashes using the CRYPT_PREFIX_SM3_YESCRYPT algorithm. + + + Available as of 1.2.0 with libcxcrypt >= 4.5.0.