랜덤으로 패스워드를 생성/암호화/복호화하는 방법
※ 본문에서는 Ubuntu 환경에서의 예문으로 다루며 RHEL 계열에서도 크게다르지 않습니다.
OS : Ubuntu 14.04 x86_64
Windows 와 LInux 모두 지원되며 RHEL/Debian 계열에서는 YUM/APT 를 통해서 설치가능합니다.
Ubuntu
mojily@chonnom:~# apt-get install pwgen
CentOS
mojily@chonnom:~# rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
mojily@chonnom:~# yum install pwgen
mojily@chonnom:~# pwgen 10 1 # [패스워드 길이] [패스워드 생성갯수]
uGee5Rieb7
:: Usage: pwgen [ OPTIONS ] [ pw_length ] [ num_pw ]
mojily@chonnom:~# pwgen 10 3
mei6kah8Oh reisiShoh0 ithei8Ki7m
패스워드 길이 50인 랜덤갯수 생성
mojily@chonnom:~# pwgen 35
vaeshooWi3phush5fuorounoh6Aighae2ja sie0eeDooshoh2geut5saeYooleTie7jo4a
aebe7pai8bai0oP5eeph7zae6seephohtie chu3Phohng1Aethub5eyitoh4umohng7mai
uS9Ho5heQuo6caichi7ooc8shoo8OoYee6e jaeseezoc3reiSh0oophae7iXi1ooxooxoJ
eaYeeh0Wugh3zei5eG9yibol5ahth4yaizi Ieh9ohs9jich9eis4ooLaemeiX7Ohgaifie
woo7eu8Eingai4aithozi1quiepheiqu8ai eip8Reixo8at9iedah9eethaiX8maek2Iet
ieghaeYing6ohdoht5cahT2keengoSaebi9 zoopug2Aenahz1uph6uthooshe6giebe6ee
cohr1hae6jaeM0thoh2izeeyieneefu4aep vohphob7ooRie7eeX8ohCha8ohPhaeGov9i
Oh0buthokaiGhud9wiu4aecu7zeeph2QuoZ leimahCh4aech6PheWoxohseiwoh9ahwoot
ziePa1saetio7EoWiuSaijooshee8ahvaiJ buwi7ohXiepoo5eeMoqu7eagha4ais2mi0h
aas6eej0aeWac0Quei3ohch0Ohmei8kebei iev9sahtao8gahfahk8aeliNg0xier2ieng
iph6aich1le6aoYot5ebooWais1teigooxu nah2eitiegh7eiw7IeC2eikaim0laemaish
Xu7OodaiY9uu1taineBae6Goh7vae4Paepe ohv4uya9oozevughuyeithoi0aiNguosi2J
EeZooThiew7iiS0OpiPeivi9dei6zohl9af aiy2iseevie3oquiph0Ahquei3oheigh9Ai
FeekezooGhooru3xech2bu5jahmaiQu0wee iu5meyoox0Gohs5aiphich2heiCh2ohrai3
ahg6veibah3diePaeboom2kee5eilee6yoh eengai9Ahpothoo8Aecu7ceegoo1vei2eiD
Eetheo7eelieraarae0eeQu1eiroaCet8li iemiLiefah3zahcoh4zohCinieJai3KeiV9
ohdie3phahch2heeNg4hoobe0Ahf6yuiti7 eaPi7agein9ThiewaeD4eeGoocho0yai7co
aiGheTie5ohgh9ooc1neica5Vaejiph9ooz aeCh1thaich1Fieciego4aeVee8oquoh1sh
ung2tee0caayaos9Ahleev9chohWohtia7a fie6ohhaeshenohlaiQue6ueghahqueam0O
Ouquahrengieteixede0oguj2aot5yiesah mud8efahSeereimiexie2eiR9ooneirahRo
2. makepasswd
mojily@chonnom:~# apt-get install makepasswd
mojily@chonnom:~# makepasswd
ehNGTpG2YU
:: 명령어뒤에 옵션값을 입력하지 않으면 기본길이는 10
mojily@chonnom:~# makepasswd --chars 20
IeIAJz1t4EzM1TDzUYKB
mojily@chonnom:~# makepasswd --chars 20 --count 5
5gvgdtBGIM37dbJaCE4i
xx8UVoCR8WDvaHI23YyK
C8Vag1TvhKBN5mFj7ujX
7u7m83geBpxy4KBP33pm
NaJnpcHX9GK64ntMHL5N
3. mkpasswd
mojily@chonnom:~# apt-get install whois
mojily@chonnom:~# mkpasswd mojily
I9cLLjK6mQK0Y
:: Usage: mkpasswd [OPTIONS]... [PASSWORD [SALT]]
4. openssl 암호화
아래 예문은 양방향(block) 암호화 aes-256-cbc 알고리즘을 이용해서 패스워드 암호화했으며 libmcrypt 2.4.x 이상 지원, 입력값 32byte마다 따라 결과값 32byte단위로 증가하는 방식입니다.
mojily@chonnom:~# echo chonnom.com | openssl enc -aes-256-cbc -a -salt -pass pass:mojily
U2FsdGVkX1/WmXnsdVjGsebzxzPISITd0qV3X1Pqliw=
※ salt 는 단방향 해시 함수에서 다이제스트를 생성할 때 추가되는 바이트 단위의 임의의 문자열
:: 암호 알고리즘 (Cipher commands)
aes-128-cbc aes-128-ecb aes-192-cbc aes-192-ecb
aes-256-cbc aes-256-ecb base64 bf
bf-cbc bf-cfb bf-ecb bf-ofb
camellia-128-cbc camellia-128-ecb camellia-192-cbc camellia-192-ecb
camellia-256-cbc camellia-256-ecb cast cast-cbc
cast5-cbc cast5-cfb cast5-ecb cast5-ofb
des des-cbc des-cfb des-ecb
des-ede des-ede-cbc des-ede-cfb des-ede-ofb
des-ede3 des-ede3-cbc des-ede3-cfb des-ede3-ofb
des-ofb des3 desx rc2
rc2-40-cbc rc2-64-cbc rc2-cbc rc2-cfb
rc2-ecb rc2-ofb rc4 rc4-40
seed seed-cbc seed-cfb seed-ecb
seed-ofb
5. openssl 복호화
aes-256-cbc 암호화 알고리즘을 이용해서 패스워드 복호화
mojily@chonnom:~# echo U2FsdGVkX1/WmXnsdVjGsebzxzPISITd0qV3X1Pqliw= | openssl enc -aes-256-cbc -a -d -salt -pass pass:mojily
