#50334 [NEW]: crypt ignores sha512 prefix

From: hanno at hboeck dot de Operating system: Linux PHP version: 5.3.1 PHP Bug Type: *Encryption and hash functions Bug description: crypt ignores sha512 prefix Description: ------------ PHP has the crypt()-function which can create salted-hashes (e.g. usable for shadow-passwords). Although it's not documented, in PHP 5.2 it was possible to pass the prefix for sha512 like in the corresponding glibc-function. Example: echo crypt('foo','$6$$bar$'); gives $6$$QMXjqd7rHQZPQ1yHsXkQqC1FBzDiVfTHXL.LaeDAeVV.IzMaV9VU4MQ8kPuZa2SOP1A0RPm772EaFYjpEJtdu. Now the same code in PHP 5.3.1 gives $6A86JNndVTdM (which is basically just crypt ignoring the $6-prefix for the salt) I assume may have something to do with (cited from crypt-documentation): "Note: As of PHP 5.3.0, PHP contains its own implementation and will use that if the system lacks of support for one or more of the algorithms. " Reproduce code: --------------- echo crypt('foo','$6$$bar$'); Expected result: ---------------- $6$$QMXjqd7rHQZPQ1yHsXkQqC1FBzDiVfTHXL.LaeDAeVV.IzMaV9VU4MQ8kPuZa2SOP1A0RPm772EaFYjpEJtdu. Actual result: -------------- $6A86JNndVTdM -- Edit bug report at http://bugs.php.net/?id=50334&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=50334&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=50334&r=trysnapshot53 Try a snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=50334&r=trysnapshot60 Fixed in SVN: http://bugs.php.net/fix.php?id=50334&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=50334&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=50334&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=50334&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=50334&r=needscript Try newer version: http://bugs.php.net/fix.php?id=50334&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=50334&r=support Expected behavior: http://bugs.php.net/fix.php?id=50334&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=50334&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=50334&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=50334&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=50334&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=50334&r=dst IIS Stability: http://bugs.php.net/fix.php?id=50334&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=50334&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=50334&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=50334&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=50334&r=mysqlcfg