Edit report at https://bugs.php.net/bug.php?id=61307&edit=1
ID: 61307
Comment by: andres at phalconphp dot com
Reported by: andres at phalconphp dot com
Summary: hash-tiger generates a different value between
5.3/5.4
Status: Not a bug
Type: Bug
Package: hash related
Operating System: Irrelevant
PHP Version: 5.4.0
Block user comment: N
Private report: N
New Comment:
This is quite unfortunate, We have thousand of passwords stored in the wrong
hash order. It looks like we have to keep PHP 5.3 for a long time.
Previous Comments:
------------------------------------------------------------------------
[2012-03-07 10:55:03] m...@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php
See changelog in documentation.
------------------------------------------------------------------------
[2012-03-06 23:58:10] me at ktamura dot com
This is a bug in ext/hash/hash_tiger.c It looks like there was a mistake during
refactoring. I am attaching a patch.
------------------------------------------------------------------------
[2012-03-06 21:38:32] andres at phalconphp dot com
Changed OS to Irrelevant
------------------------------------------------------------------------
[2012-03-06 21:33:26] andres at phalconphp dot com
Description:
------------
The hash generated by PHP 5.3.x is diferent than the generated by 5.4.x using
the hashing algorithm tiger160,3
Test script:
---------------
PHP 5.3.x:
[#] php -v
PHP 5.3.8 (cli) (built: Feb 28 2012 10:44:41)
Copyright (c) 1997-2011 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2011 Zend Technologies
[#] php -r 'echo hash("tiger160,3", "1awks!4090");'
f8d2f5f634cc0ec4f495ac1aeb45010e90e310a3
[#] php -v
PHP 5.4.1RC1-dev (cli) (built: Mar 6 2012 16:25:42) (DEBUG)
Copyright (c) 1997-2012 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2012 Zend Technologies
[#] php -r 'echo hash("tiger160,3", "1awks!4090");'
c40ecc34f6f5d2f80e0145eb1aac95f43045295d
Expected result:
----------------
Hash values returned must be the same for the same value between php versions
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=61307&edit=1
