CRYPT(3) replacement

Question

Hello,
I'm writing a script to change passwords on different servers: windows, red hat, Solaris, ...
For windows it is easy (thank you PowerShell) but for unix/linux it is harder.
I'm looking to find a replacement for the command CRYPT(3) from linux
manual page 
can anyone help me with this?
Thank you in advance

Answer 1

Here is how we do the same thing on a WIndows machine.
$ss|ConvertFrom-SecureString
$ss=ConvertTo-SecureString -String MyTextPassword -AsPlainText -Force
The encrypted string is NOT portable.  It is only usable on the box it was created on.
The Crypto API can encrypt in most portable formats but portable formats generally require a certificate.
Your SSL connection uses a remote cert on the Unix box to encrypt the connection.  The same is true for HTTPS.  That is because they require a shared key and the target of the connection controls the encryption which eliminates the need for the
client to have a copy of the certificate or the passkey.  TH client uses the host cert and a shared temporary key sent over the secured channel.
password encryption is not a shared key.  We create a secure channel first then send a plain text password.  In Windows on a  domain the password is actually sent encrypted over a secure channel and blindly applied to the password manager. 
If the password validates a token is allocated and there is no more password with further authentication.
I am not up to date on how Linux currently handles this.  It used to just keep the passwords in a file that was protected and later encrypted.  Most corporate Unix implementations now use Kerberos which is what Windows uses in a domain.
¯\_(ツ)_/¯