This operation generates an RFC 2307-compliant, cryptographically-secure SSHA (Salted SHA1) password hash - commonly used for storing passwords in systems such as OpenLDAP.
Contrary what the similar-sounding name may suggest, this is different to the existing SHA1 operation (although does use SHA1 in part) and despite the code being very simple, it is actually a surprisingly difficult recipe to build in CyberChef using the existing set of operations
No automated test is applicable for this. This is because the output (although derived from the input) is not deterministic, as it involves a random IV
Given the intended use case of this involves entering a password into the input field, it would have been great to include a 'Mask Input' checkbox in the operation which causes the input field to mask, however I could not find any way to programmatically do this without attempting something extremely hacky... which just didn't seem right. Happy to consider any alternative options anyone may know of for that if it sounds like a good idea though.
This operation generates an RFC 2307-compliant, cryptographically-secure SSHA (Salted SHA1) password hash - commonly used for storing passwords in systems such as OpenLDAP.
More detail here on SSHA: https://www.openldap.org/faq/data/cache/347.html
Some things to note: