note 70748 deleted from function.crypt by nlopess
| From: | nlopess@php.net | Date: | Tue, 28 Nov 2006 21:53:47 +0000 |
| Subject: | note 70748 deleted from function.crypt by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-120144@lists.php.net to get a copy of this message | ||
Note Submitter: solar at openwall dot com
----
The approach suggested in the note by Michael Stapelberg must not be used - it's an obvious
security hole, leaking up to 12 bits of the plaintext password into the resulting string.