1RADCRYPT(8) System Manager's Manual RADCRYPT(8)
2
3
4
6 radcrypt - generate password hash for use with radius, or validates a
7 password hash
8
10 radcrypt [-d|--des] [-m|--md5] [-c|--check] plaintext_password
11 [hashed_password]
12
14 radcrypt generates a hashed digest of a plaintext password, or can val‐
15 idate if a password hash matches a plaintext password. DES and MD5
16 hashes are currently supported. When generating a password hash a ran‐
17 dom salt is generated and applied.
18
19 A hashed password can be validated by specifying -c or --check and
20 passing hashed_password after plaintext_password on the command line.
21 In this case hashed_password will be checked to see if it matches
22 plaintext_password. If so "Password OK" will be printed and the exit
23 status will be 1, otherwise "Password BAD" will be printed and exit
24 status will be 0 (Note this is the opposite of a normal successful
25 shell status).
26
27
29 -d --des
30 Use a DES (Data Encryption Standard) hash (default). Ignored if
31 performing a password check.
32
33 -m --md5
34 Use a MD5 (Message Digest 5) hash. Ignored if performing a
35 password check.
36
37 -c --check
38 Perform a validation check on a password hash to verify if it
39 matches the plantext password.
40
41
43 $ radcrypt foobar
44 HaX0xn7Qy650Q
45 $ radcrypt -c foobar HaX0xn7Qy650Q
46 Password OK
47
49 radiusd(8), crypt(3)
50
52 Miquel van Smoorenburg <miquels@cistron-office.nl>
53
54
55
56 RADCRYPT(8)