[issue8596] crypt blowfish 'ignores' salt

pvo report at bugs.python.org
Sun May 2 23:27:07 CEST 2010


pvo <user+python at localhost.localdomain.org> added the comment:

FreeBSD's crypt(3) doesn't explain the 'salt' for Blowfish crypt exactly. OpenBSD's crypt(3) says: "The Blowfish version of crypt has 128 bits of salt in order to make building dictionaries of common passwords space consuming."

I wrote a few lines of C code. Copied the salts from the output above to it and cryt()ed "test". The result differs:
$2a$05$/Ae.aeamG.....O.../52uwMz3Q1WQSyWoWTy6zNndsrkAl2fnTn.

I hope I'll find some useful hints in the near future.

----------
status: pending -> open

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue8596>
_______________________________________


More information about the Python-bugs-list mailing list