tcb

Alternative password shadowing scheme

BSD-3-Clause www.openwall.com tcb 1 release newest changed 15 days ago

version1.2 attributetcb rev8d5d270900d3fc75655ea2d9d248b234f6631439 2026-09-27 · one commit for every system systemsaarch64-darwin✓ aarch64-linuxx86_64-darwin✓ x86_64-linux

$ devbox add tcb@1.2

$ nix shell github:NixOS/nixpkgs/8d5d270900d3fc75655ea2d9d248b234f6631439#tcb

JSON: /v2/resolve?name=tcb&version=latest

Releases

newest first, as /v2/pkg orders them

Version	arm mac	arm linux	x86 mac	x86 linux	Attribute	Commit	Date	Outputs
1.2resolved	–	✓	–	✓	`tcb`	02f5696b0e	2026-09-13	bin (Linux only), man (Linux only), out (Linux only), dev (Linux only)

Prereleases are listed but latest never picks one. “varies” means each system last changed at a different nixpkgs commit — the release page lists them.

Description

The tcb package contains core components of our tcb suite implementing the alternative password shadowing scheme on Openwall GNU Linux (Owl). It is being made available separately from Owl primarily for use by other distributions. The package consists of three components: pam_tcb, libnss_tcb, and libtcb. pam_tcb is a PAM module which supersedes pam_unix. It also implements the tcb password shadowing scheme. The tcb scheme allows many core system utilities (passwd(1) being the primary example) to operate with little privilege. libnss_tcb is the accompanying NSS module. libtcb contains code shared by the PAM and NSS modules and is also used by user management tools on Owl due to our shadow suite patches.