pwdhash / pwdhash-webextension

PwdHash webextension for firefox
https://addons.mozilla.org/de/firefox/addon/pwdhash
Other
13 stars 11 forks source link

Same inputs, different hashed password #12

Open EricDuminil opened 5 years ago

EricDuminil commented 5 years ago

On Firefox 66.0.2 (64-Bit), Windows 10, pwdhash now returns a different hashed password than with previous Firefox versions, for the same inputs.

For example : master password fakepassword used to be hashed to kA3AvotLhp8dUO on google.com, it is now hashed to 5hzK8q28BCAKL0fzjgp5ZgAAAA.

I have no idea where this hash comes from or how insecure it is.