-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
argon2: $argon2d$m=2048,t=1,p=1$xxxxxxxxxxxxxxxx is cracked by any password #2650
Comments
I am able to reproduce this issue but I haven't looked in depth to figure out why it happens. |
I think for now we should workaround this with (tested, works):
but it looks like an upstream API issue, so I'll check the latest upstream and report to there if still relevant. |
What's the base for that patch? |
I happened to be using a tree from August 14, its latest commit was f3dd1a6 |
Not sure what I did 20 minutes ago but I couldn't find that code at those lines. But it's there alright 😆 |
I now committed that, in your name. |
Discussion with upstream project: P-H-C/phc-winner-argon2#223 Summary: looks like I was too quick to notify them, the issue is probably already fixed there. We should sync to latest and re-test. |
John cracks synthetic argon2 hashes of form
$argon2d$m=2048,t=1,p=1$xxxxxxxxxxxxxxxx with any password. It does
not seem correct.
I just used john right from repo, with default configuration.
The text was updated successfully, but these errors were encountered: