Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Possible security flaw in your Solar Designer bcrypt implementation #39

Closed
aef opened this issue Feb 24, 2012 · 3 comments
Closed

Possible security flaw in your Solar Designer bcrypt implementation #39

aef opened this issue Feb 24, 2012 · 3 comments

Comments

@aef
Copy link

aef commented Feb 24, 2012

Could you please answer me the following question:

http://security.stackexchange.com/questions/12132/could-the-bcrypt-ruby-binding-be-vulnerable
@aef
Copy link
Author

aef commented Feb 27, 2012

It seems your C-implementation is not subject to this specific security flaw. You should however consider to produce $2y$ prefixed hashes to clarify the situation.

@tjschuck tjschuck mentioned this issue Sep 3, 2013
Closed
reedloden added a commit to reedloden/bcrypt-ruby that referenced this issue Mar 11, 2014
@reedloden
Update crypt_blowfish implementation from v1.1 to v1.2
651f29f 
* Fixes bcrypt-ruby#39, bcrypt-ruby#80
* Include new tests from upstream (fixes bcrypt-ruby#84)
@reedloden reedloden mentioned this issue Mar 11, 2014
Closed
reedloden added a commit to reedloden/bcrypt-ruby that referenced this issue Mar 11, 2014
@reedloden
Update crypt_blowfish implementation from v1.1 to v1.2
5eb0688 
* Fixes bcrypt-ruby#39, bcrypt-ruby#80
* Include new tests from upstream (fixes bcrypt-ruby#84)
reedloden added a commit to reedloden/bcrypt-ruby that referenced this issue Mar 11, 2014
@reedloden
Update crypt_blowfish implementation from v1.1 to v1.2
fdf7e5e 
* Fixes bcrypt-ruby#39, bcrypt-ruby#80
* Include new tests from upstream (fixes bcrypt-ruby#84)
@rfzee
Copy link

rfzee commented Mar 26, 2014

+1

reedloden added a commit to reedloden/bcrypt-ruby that referenced this issue Feb 12, 2015
@reedloden
Update crypt_blowfish implementation from v1.1 to v1.3
c5e4360 
* Fixes bcrypt-ruby#39, bcrypt-ruby#80
* Include new tests from upstream (fixes bcrypt-ruby#84)
samcday pushed a commit to atlassian/bcrypt-ruby that referenced this issue Feb 15, 2017
@reedloden @duane
Update crypt_blowfish implementation from v1.1 to v1.3
76e0001 
* Fixes bcrypt-ruby#39, bcrypt-ruby#80
* Include new tests from upstream (fixes bcrypt-ruby#84)
@tjschuck
Copy link
Collaborator

Fixed in #182

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update crypt_blowfish implementation from v1.1 to v1.3 reedloden/bcrypt-ruby
3 participants
@rfzee @aef @tjschuck