Hello, all. This patch imports strong cryptography and fixes some issues in authentication system. 1) grub_auth_strcmp and grub_auth_strword are removed. They ended up to be too complex which is security-issue prone. For password I now hardcode maximum length as was suggested and use grub_crypto_memcmp. Logins are now considered non-confidential 2) Ciphers and hashes are imported from libgcrypt. Actual import is automated and imported files are not included in the patch. To import do: python import_gcry.py . Crypto interface is designed for simplicity and small size 3) PBKDF2-SHA512 password support to increase security. To generate the encrypted password do: grub-pbkdf2 [-c iteration_count] It may not work on non-unix platforms due to terminal control functions (disabling echo) and /dev/random (retrieving salt). Patches are welcome PBKDF2 is imported from gnulib 4) xnu_uuid is cleanup to use MD5 from libgcrypt through crypto interface 5) Imported devmapper.mod by Simon Peter. Completely UNTESTED. Known issues: No cipher and hash autoloading if it's looked up by the name. Password and hash modules aren't locked if a cipher/digest is used to prevent accidental unload. I send the patch and the same is available in my crypto branch -- Regards Vladimir 'phcoder' Serbinenko