Re: Re: Bug #12745: problem with the randomic generation of salt when a use crypt("pass")

Not a bug in PHP. Verified with htpasswd (couldn't get a simple crypt-demonstration-script working :-) $ ./htpasswd -d -nb test 11lei11lao11 returned test:Au7LW/UPElj0c $ ./htpasswd -d -nb test 11lei11lao11whatever returned test:Au7LW/UPElj0c I guess it's a bug (or an undocumented behaviour) of the crypt()-algoritm. The problem is not the random salt. The problem seems to be that crypt (at least, in this case) only uses the first 12 characters (or less). Sander ----- Original Message ----- From: "Marcus Vinicius" <marcusvinicius@marcusvinicius.f2s.com> To: "PHP Bug Database" <php-dev@lists.php.net> Sent: Wednesday, August 15, 2001 2:31 PM Subject: [PHP-DEV] Re: Bug #12745: problem with the randomic generation of salt when a use crypt("pass") > der.... > > I supose that is must not work.... but works, did you tested ? > > ----- Original Message ----- > From: "PHP Bug Database" <php-dev@lists.php.net> > To: <marcus@marcusvinicius.f2s.com> > Sent: Tuesday, August 14, 2001 8:40 PM > Subject: Bug #12745: problem with the randomic generation of salt when a use > crypt("pass") > > > > From: marcus@marcusvinicius.f2s.com > > Operating system: Linux Slackware 7.1 > > PHP version: 4.0.6 > > PHP Bug Type: *Encryption and hash functions > > Bug description: problem with the randomic generation of salt when a use > crypt("pass") > > > > problem with the randomic generation of salt when a use $string = > > crypt("11lei11lao11") it allways generates a salt ( the first 2 chars from > > encrypted string ) that if use crypt("11lei11lao11blablabla") would work, > > and also crypt("11lei11lao11anythingwouldworkhere"). > > > > the code is > > > > $cryptedpass = crypt("11lei11lao11"); > > if (crypt ( "11lei11lao11anythingwouldworkhere", substr ( $cryptedpass, 0, > > 2)) == $cryptedpass) { > > echo "this is extremely strange for me"; > > } > > > > and this works with this pass but not whit others!!!!!!!!!!!!!!!!! > > -- > > Edit bug report at: > > http://bugs.php.net/?id=12745&edit=1 > > > > > -- > PHP Development Mailing List <http://www.php.net/> > To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net > For additional commands, e-mail: php-dev-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >