Possible security flaw in your Solar Designer bcrypt implementation #39

Activity

1. aef commented on Feb 27, 2012

   

   aef

   on Feb 27, 2012

   Author

   More actions

   It seems your C-implementation is not subject to this specific security flaw. You should however consider to produce $2y$ prefixed hashes to clarify the situation.
2. reedloden

   added 3 commits that reference this issue on Mar 11, 2014

   Update crypt_blowfish implementation from v1.1 to v1.2

   ...

   This issue will close once commit 651f29f is merged into the 'master' branch.

   651f29f

   Update crypt_blowfish implementation from v1.1 to v1.2

   ...

   This issue will close once commit 5eb0688 is merged into the 'master' branch.

   5eb0688

   Update crypt_blowfish implementation from v1.1 to v1.2

   ...

   This issue will close once commit fdf7e5e is merged into the 'master' branch.

   fdf7e5e
3. izidorome commented on Mar 26, 2014

   

   izidorome

   on Mar 26, 2014

   More actions

   +1
4. reedloden

   added a commit that references this issue on Feb 12, 2015

   Update crypt_blowfish implementation from v1.1 to v1.3

   ...

   This issue will close once commit c5e4360 is merged into the 'master' branch.

   c5e4360
5. samcday

   added a commit that references this issue on Feb 15, 2017

   Update crypt_blowfish implementation from v1.1 to v1.3

   ...

   This issue will close once commit 76e0001 is merged into the 'master' branch.

   76e0001
6. tjschuck commented on Nov 13, 2018

   

   tjschuck

   on Nov 13, 2018

   Collaborator

   More actions

   Fixed in #182
7. tjschuck

   closed this as completedon Nov 13, 2018