New submission from Микаела Стоичкова <m.stoichkov...@gmail.com>:
I am having an issue with crypt library (Lib/crypt.py) when hashing passwords containing dolalr sign ("$") . I am using python 3.8.5 on Linux. To compare hashed passwords produced by crypt, I used openssl utilities. When generating hashes for password without "$", crypt and openssl return the same result. But when generating hashes for passwords containing $ dollar sign, crypt returns a result different from the result returned by openssl: openssl passwd -6 "cash$money" $6$C0UG33RcHmBVAjQ/$j1Tm2WSaZzDIzVQTgk71z6nY7fiJnaLe6Lxy8DzGystQ1Jive7IuqIUJq5s2F9wdXRpm8jNs7iksV8oHPVKYC0 python3 -c 'import crypt; print(crypt.crypt("cash$money","$6$C0UG33RcHmBVAjQ/"))' $6$C0UG33RcHmBVAjQ/$Tm9aYQq7BsTT/awN6wiUZ6ysamqX9qUVKBV.TjML5udxWqupAB7luv/.KYypZnpQ9eI33R4Lw3O4Jx4NZjTEV/ I did not find a special mention for dollar sign in the documentation. Thanks for your help. ---------- components: Library (Lib) messages: 381615 nosy: m.stoichkovaaa priority: normal severity: normal status: open title: crypt produces wrong hashes for passwords containing dollar sign type: behavior versions: Python 3.8 _______________________________________ Python tracker <rep...@bugs.python.org> <https://bugs.python.org/issue42437> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com