Re: [PROPOSED] password_hash RFC - Implementing simplified password hashing functions
| From: | Nikita Popov | Date: | Thu, 12 Jul 2012 17:32:44 +0000 |
| Subject: | Re: [PROPOSED] password_hash RFC - Implementing simplified password hashing functions | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-61180@lists.php.net to get a copy of this message | ||
On Thu, Jul 12, 2012 at 7:24 PM, Alex Aulbach <alex.aulbach@gmail.com> wrote:
> 1. The resulting string should have a version information. For example
> the first char. the example hash will look like
> "1$2y$07$usesomesillystringfore2uDLvp1Ii2e./U9C8sBjqp8I90dH6hi",
> instead of "$2y$07$usesomesillystringfore2uDLvp1Ii2e./U9C8sBjqp8I90dH6hi"
See that 2y in the string? That's the version information. If a
different algorithm is used, a different string will be in there. This
also applies to changes to the algorithm itself. E.g. the 2y prefix is
already a modified version of the original bcrypt algorithm.
Nikita