File:/master/libbb/pw_encrypt.c#L151 Function crypt() is a poor one-way hashing algorithm; since it only accepts passwords of 8 characters or less, and only a two-byte salt, it is excessively vulnerable to dictionary/bruteforce based attacks given today's faster computing equipment. Use a different algorithm, such as SHA-1, with a larger non-repeating salt.
What do you think pw_encrypt_sha.c is for?