note 107578 deleted from function.crypt by sp
| From: | sp@php.net | Date: | Mon, 16 Apr 2012 07:56:58 +0000 |
| Subject: | note 107578 deleted from function.crypt by sp | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-187176@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
I keep finding collisions, here is one (salt can be anything):
$one = base64_decode('AAOafeUhQlGwYrHtKe/0z/mCVciFIeIOhTicC1Rp8DJf4nmMsefGnMxncirXmBA=');
$two = base64_decode('AMOCK9gdS6zuaaOpbOQAL0vEn40=');
echo crypt($one, '$2a$07$usesomesillystringforsalt$') == crypt($two,
'$2a$07$usesomesillystringforsalt$');//prints 1