You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is the follow-up of the discussions in #1332. As mentioned in that PR it would be nice to not rely on the hash format (prefix/ID etc.) to determine the type of the hash. Since not all hash algorithms uses Modular Crypt Format or PHC string format and comparing some arbitrary prefixes is risky and not straightforward it would be nice to have a better solution.
Proposal
Ideally it would be to keep the information about the type of the hash in the credentials config. This would cleanup the code and allow some other operations to be done easily on the hashes (statistics, audits, etc.). It would also allow cleaner implementation of some legacy hashers and perhaps help with #605.
The text was updated successfully, but these errors were encountered:
harnash
changed the title
Hash type detection improvements
Feat: Hash type detection improvements
May 26, 2021
Background
This is the follow-up of the discussions in #1332. As mentioned in that PR it would be nice to not rely on the hash format (prefix/ID etc.) to determine the type of the hash. Since not all hash algorithms uses Modular Crypt Format or PHC string format and comparing some arbitrary prefixes is risky and not straightforward it would be nice to have a better solution.
Proposal
Ideally it would be to keep the information about the type of the hash in the credentials config. This would cleanup the code and allow some other operations to be done easily on the hashes (statistics, audits, etc.). It would also allow cleaner implementation of some legacy hashers and perhaps help with #605.
The text was updated successfully, but these errors were encountered: