Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 01 Sep 2015 09:21:16 +0200
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: FormSpring valid()

On 2015-09-01 08:59, Kai Zhao wrote:
> On Tue, Sep 1, 2015 at 2:56 PM, magnum <john.magnum@...hmail.com> wrote:
>>
>> Did you create an issue for this? Is it fixed?
>
> No, I was not sure whether this was a bug. So I posted it here. Is this
> a bug ? I will create an issue if it is.

I do not know but I think there should be an issue for finding out (or 
it will be forgotten).

The existing untagged test vector only has a salt length of two, I 
wonder if that is the difference? Maybe real Formspring hashes have that 
limitation?

magnum

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ