Skip to content
No description, website, or topics provided.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
demo
experiments
ldap
pythia
python_code
Makefile
README.md
ersatz.c
ersatz.h
ersatz_words.h
pam_unix.8
pam_unix.c
pam_unix_test.c

README.md

ErsatzPassword

ErsatzPassword is a PAM_UNIX module that utilizes the Yubikey HSM to generate cryptographic password hashes in a clever way. If an attacker steals the hashed password file (e.g., /etc/shadow, /etc/master.passwd) and attempts to crack the password via a dictionary bruteforce attack, the ersatz “fake” passwords are revealed rather than the true password. The detailed design of this tool can be found in here.

You can’t perform that action at this time.