In article <10835 at ulysses.homer.nj.att.com> smb at ulysses.homer.nj.att.com (Steven M. Bellovin) writes: >You don't need to use all 4096 salts; you simply need the ones used >on the target system. It turns out that, due to a (apparent) bug in passwd.c, at least on Berkeley systems, only about 400 salts ever get used. Jeff Siegal