Bug #61307 [Nab]: hash-tiger generates a different value between 5.3/5.4
| From: | rasmus@php.net | Date: | Wed, 07 Mar 2012 18:15:40 +0000 |
| Subject: | Bug #61307 [Nab]: hash-tiger generates a different value between 5.3/5.4 | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-168242@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=61307&edit=1
ID: 61307
Updated by: rasmus@php.net
Reported by: andres at phalconphp dot com
Summary: hash-tiger generates a different value between
5.3/5.4
Status: Not a bug
Type: Bug
Package: hash related
Operating System: Irrelevant
PHP Version: 5.4.0
Block user comment: N
Private report: N
New Comment:
Yeah, I think we need to come up with a way to support both or else it leaves
people without an easy way to fix those hashes. Technically I guess you can
reconstruct it from the raw by flipping the bytes, but that is rather error-
prone.
Previous Comments:
------------------------------------------------------------------------
[2012-03-07 16:22:17] andres at phalconphp dot com
This is quite unfortunate, We have thousand of passwords stored in the wrong hash order. It looks
like we have to keep PHP 5.3 for a long time.
------------------------------------------------------------------------
[2012-03-07 10:55:03] mike@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to
report
a bug at http://bugs.php.net/how-to-report.php
See changelog in documentation.
------------------------------------------------------------------------
[2012-03-06 23:58:10] me at ktamura dot com
This is a bug in ext/hash/hash_tiger.c It looks like there was a mistake during refactoring. I am
attaching a patch.
------------------------------------------------------------------------
[2012-03-06 21:38:32] andres at phalconphp dot com
Changed OS to Irrelevant
------------------------------------------------------------------------
[2012-03-06 21:33:26] andres at phalconphp dot com
Description:
------------
The hash generated by PHP 5.3.x is diferent than the generated by 5.4.x using the hashing algorithm
tiger160,3
Test script:
---------------
PHP 5.3.x:
[#] php -v
PHP 5.3.8 (cli) (built: Feb 28 2012 10:44:41)
Copyright (c) 1997-2011 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2011 Zend Technologies
[#] php -r 'echo hash("tiger160,3", "1awks!4090");'
f8d2f5f634cc0ec4f495ac1aeb45010e90e310a3
[#] php -v
PHP 5.4.1RC1-dev (cli) (built: Mar 6 2012 16:25:42) (DEBUG)
Copyright (c) 1997-2012 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2012 Zend Technologies
[#] php -r 'echo hash("tiger160,3", "1awks!4090");'
c40ecc34f6f5d2f80e0145eb1aac95f43045295d
Expected result:
----------------
Hash values returned must be the same for the same value between php versions
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=61307&edit=1