NAME¶

3proxy_crypt - utility to generate encrypted passwords for 3proxy

SYNOPSIS¶

3proxy_crypt password
3proxy_crypt salt password

DESCRIPTION¶

3proxy_crypt is a utility to generate encrypted password hashes for use with 3proxy configuration. Encrypted passwords allow the system to avoid storing passwords in cleartext in configuration files.

When invoked with a single argument, it produces an NT password hash (MD4-based, suitable for NTLM authentication). The output is prefixed with NT:.

When invoked with two arguments (salt and password), it produces a BLAKE2b password hash. The salt length is limited to 64 characters. The output is prefixed with CR:.

The resulting hash can be used in the 3proxy configuration file with the users directive instead of a cleartext password.

OPTIONS¶

password

Cleartext password to encrypt.

salt

Salt string for BLAKE2b hashing (max 64 characters).

EXAMPLE¶

Generate NT password hash:

Result:

Generate BLAKE2b password hash with salt:

Result:

Using in 3proxy.cfg:

NOTES¶

The NT hash uses the RSA MD4 Message-Digest Algorithm. The BLAKE2b hash uses the BLAKE2 cryptographic hash function.

When a password hash is prefixed with NT: or CR:, 3proxy uses the corresponding algorithm to verify passwords instead of comparing cleartext strings.

BUGS¶

Report all bugs to 3proxy@3proxy.org

SEE ALSO¶

3proxy(8), 3proxy.cfg(5),
https://3proxy.org/

AUTHORS¶

3proxy is designed by Vladimir Dubrovin <vlad@3proxy.org>