1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Tomato admin password length?

Discussion in 'Tomato Firmware' started by paulgj, Nov 20, 2008.

  1. paulgj

    paulgj LI Guru Member


    Just curious as to what the maximum length of the Tomato admin password is? I didn't see the information on the Wiki or in the FAQ.

  2. danix71

    danix71 LI Guru Member

    I have a 15 letters&numbers password and working just fine. :biggrin:
  3. paulgj

    paulgj LI Guru Member

    I have a 50 character password with a mixture of letters, numbers and special characters and it seems to work although it might be truncating the password to a shorter length.
  4. nvtweak

    nvtweak LI Guru Member

    Try using just the first 7 or 8 characters. Does it let you in?

    EDIT: Nevermind. I had look at the shadow file and it looks to be using MD5.

    Some older versions of Linux used crypt which limited password length to like 8 characters.

    With MD5, the only limit on your password length should be the amount of characters that can be stored in nvram. But that's way more than 50 chars :eek: :wink:
  5. rhester72

    rhester72 Network Guru Member

    It depends.

    Your http password is stored in NVRAM unencrypted (which kinda sucks). I'm not sure what the maximum length of a NVRAM variable is (it's huge, I know that it's much more than 256 characters, and quite possibly up to the available NVRAM).

    The Linux password, on the other hand, uses a hash which has nothing to do with the length of your password - in fact, the hash is always exactly 34 characters in length, regardless of the length of your password. When you enter the password, it is encoded with the same hashing algorithm, and the hashes are compared for a match. That means that a) the length of your Linux password is unlimited, and b) yes, there is a chance of a collision where two passwords can hash to the same value. The odds of that are precisely 1 in 34^94 (34 positions, 94 possible printable characters per position including space but excluding :, the separator), or 1 in 909,951,409,342,855,925,355,993,498,119,076,813,298,508,115,919,177,128,188,962,449,549,571,707,750,826,091,524,680,243,158,550,269,590,674,531,420,897,476,071,110,905,661,162,001,254,055,936. I'm not too worried about that. =)


Share This Page