Update and Fix PHP bcrypt to login server bcrypt compatibility (#462)

Browse Source

Update jBCrypt from version 0.2 to 0.4 which resolves a security bug with character encoding and corrects an integer overflow bug.
Modify jBCrypt library to handle $2y$ hashes, which are produced by PHP's password_hash bcrypt function.  The original jBCrypt library only recognizes $2a$ hashes which makes it harder for a website CMS (content management system) to interface with the server's login and databases.

Credit to: Ariel Salomon for compatibility support of 2b, 2y, and 2x hashes https://github.com/anebril/jBCrypt/commit/fe143600107f3b7975f603ddfe843669421e2bf9#diff-61d1d5b7b3c721fac60702cf559d70aa

...

This commit is contained in:

jongames

2019-05-04 11:36:12 -03:00

committed by Ronan Lana

parent 618d53c707

commit e70215eb9d

1 changed files with 848 additions and 670 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

src/tools/BCrypt.java

+848 -670

File diff suppressed because it is too large Load Diff