simonepri / upash

🔒Unified API for password hashing algorithms
https://www.npmjs.com/upash
MIT License
536 stars 24 forks source link

Can support CRYPT_BLOWFISH #5

Open fanybook opened 6 years ago

fanybook commented 6 years ago

Use the CRYPT_BLOWFISH algorithm to create the hash. This will produce a standard crypt() compatible hash using the "$2y$" identifier.

like php

simonepri commented 6 years ago

@fanybook Thank you for opening the issue! I'll definitely look into this!

simonepri commented 6 years ago

@fanybook The point of the issue was that the bcrypt implementation should support the $2y identifier instead of only $2a and $2b or I misunderstood?

Thanks!

JanTvrdik commented 6 years ago

ref http://www.php.net/security/crypt_blowfish.php

simonepri commented 6 years ago

Sorry but I still don't get the point. Blowfish is just a cipher and it's used internally by bcrypt.

fanybook commented 6 years ago

I want to get a hash using $2y$ prefix because i mixed use of php and js

My password was made by Laravel(php)

I hope hash check is true in js

cgarcia-lightit commented 9 months ago

i had the same problem as @fanybook , i had an old system in Elixir that create encrypted passwords using bcrypt. but elixir doesn't support $2y prefix and I need to force laravel to generate hashes with $2a that is suported by blowfish but i don't know if is it possible