[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8878) PBKDF2 Is Broken (1 in 64 hashes)



--On Tuesday, July 17, 2018 5:35 AM +0000 jroose@gmail.com wrote:

> This is a significant bug in this module, because it causes the hash
> algorithm to fail to be replicable by outside hash implementations 1 out
> of every 64 hashes on average.

Thanks for the report.  This is now fixed in git master:

- Log -----------------------------------------------------------------
commit d40a832db011985d6a6b787a88dd802b02d5d5dc
Author: Ond??ej Kuzn??k <ondra@openldap.org>
Date:   Thu Nov 8 11:09:38 2018 +0000

    ITS#8878 Include the first character in the transformation

-----------------------------------------------------------------------

--Quanah



--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>