google / ctfscoreboard

Scoreboard for Capture The Flag competitions.
Apache License 2.0
166 stars 61 forks source link

Updated hashing #298

Open ghost opened 3 years ago

ghost commented 3 years ago

Satisfies #262

gwarf commented 2 years ago

I've tested this with a MariaDB database, and it fails saying that Argon2 hash is too long for the length of the pwhash column that is at 48. Didn't checked much to find what's the appropriate length, but it works with a length of 120.

gwarf commented 2 years ago

Apparently this is also breaking other things, like the challenge creation, due to another issue with the column size, and the validation in validate_answer in the static_argon2.py, argon2.PasswordHasher().hash getting more parameters than expected.