Code

crypt-blowfish salt is too short#12428

Code

Merged

wilsonge merged 11 commits intojoomla:stagingjoomla/joomla-cms:stagingfrom photodude:patch-9photodude/joomla-cms:patch-9Copy head branch name to clipboardDec 8, 2016

+20-5

Commits

Commits on Oct 16, 2016

• Fix the generation of salt for crypt-blowfish

  Show description for 9e2667d
  photodude

  authored
  9e2667d

• Pass hash crypt-blowfish without salt is length 60

  photodude

  authored
  a0a50db

• Increase Cost Factor for crypt-blowfish

  Show description for 824ae34
  photodude

  authored
  824ae34

Commits on Oct 20, 2016

• Merge branch 'staging' into patch-9

  photodude

  authored
  c1be90c

Commits on Nov 29, 2016

• Merge branch 'staging' into patch-9

  photodude

  authored
  74c109c

Commits on Dec 3, 2016

• Merge branch 'staging' into patch-9

  photodude

  authored
  7a2373b

• Verify a pre-J3.2.1 crypt-blowfish without salt Password

  photodude

  authored
  44c17a0

• Improve the verification of a pre-J3.2.1 getCryptedPassword() Password

  Show description for aa7e332
  photodude

  authored
  aa7e332

Commits on Dec 4, 2016

• Merge branch 'staging' into patch-9

  photodude

  authored
  6ba9c81

• verify a pre-phpass password hash

  Show description for 9ed5d52
  photodude

  authored
  9ed5d52

• Add one test with existing hash from old method

  Show description for 3f3ccb0
  photodude

  authored
  3f3ccb0