[Bug 1183338] Re: Crypt Blowfish only returns salt
Thank you for taking the time to report this bug and helping to make Ubuntu better. I have reproduced the behaviour you describe on 5.4.9-4ubuntu2. According to the documentation, the salt provided for Blowfish must be: 22 characters from the alphabet ./0-9A-Za-z See: http://php.net/manual/en/function.crypt.php Changing your test case to: echo crypt('1369300336testtest','$2a$07$1234567890123456789012$'); generates the output: 1$2a$07$123456789012345678901uZYllnydIbsLxOEuXdlYwl811OX1hihq Thus I believe that PHP is working as specified, so this bug is Invalid. You need to specify a valid salt. If you disagree, please explain and change the bug status back to New. ** Changed in: php5 (Ubuntu) Status: New = Invalid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1183338 Title: Crypt Blowfish only returns salt To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1183338/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1183338] Re: Crypt Blowfish only returns salt
My question is then, why does this behaviour only show itself on Ubuntu (debian?) based systems? None of the other OS'es I have tried seem to have this issue. In fact it seems they fill the 'missing' salt with '$'. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1183338 Title: Crypt Blowfish only returns salt To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1183338/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1183338] Re: Crypt Blowfish only returns salt
Debian/Ubuntu may use a different implementation perhaps, such as the system one. But what you have is a question rather than a bug - perhaps try askubuntu.com? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1183338 Title: Crypt Blowfish only returns salt To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1183338/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1183338] Re: Crypt Blowfish only returns salt
Yes, PHP up to and including 5.4 (the patch hasn't been ported to 5.5 yet) is using system implementation of available ciphers. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1183338 Title: Crypt Blowfish only returns salt To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1183338/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs