Repository navigation
Incorrect treatment of 2a/2y header in equivalency operator #96
Description
head :006 > BCrypt::Password.create("test")
=> "$2a$10$HOuBG8tzKLUyk1RK18Xz2uFE76ROdT7w92RSAclL1IoyiS56o70bO"
head :007 > tpw = BCrypt::Password.new("$2a$10$HOuBG8tzKLUyk1RK18Xz2uFE76ROdT7w92RSAclL1IoyiS56o70bO")
=> "$2a$10$HOuBG8tzKLUyk1RK18Xz2uFE76ROdT7w92RSAclL1IoyiS56o70bO"
head :008 > tpw == "test"
=> true
head :009 > tpw = BCrypt::Password.new("$2y$10$HOuBG8tzKLUyk1RK18Xz2uFE76ROdT7w92RSAclL1IoyiS56o70bO")
=> "$2y$10$HOuBG8tzKLUyk1RK18Xz2uFE76ROdT7w92RSAclL1IoyiS56o70bO"
head :010 > tpw == "test"
=> false
Expected is true on both. 2a and 2y hashes should be perfectly compatible.
Activity
tjschuck commentedon Jun 10, 2014
Duplicate of #91, with some additional issues linked there. Closing this in favor of those.
Thanks for reporting!