[MediaWiki-l] Are passwords hashed and salted both?

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

[MediaWiki-l] Are passwords hashed and salted both?

WJhonson
Does the Mediawiki software using a simple hashing on the passwords?
Or are they also salted?


_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Are passwords hashed and salted both?

John Doe-27
Both

On Thu, Oct 3, 2013 at 6:15 PM, Wjhonson <[hidden email]> wrote:

> Does the Mediawiki software using a simple hashing on the passwords?
> Or are they also salted?
>
>
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Are passwords hashed and salted both?

Chris Steipp
In reply to this post by WJhonson
The default is md5( $salt - md5( $password ) ). So salt and 2 hashes.


On Thu, Oct 3, 2013 at 3:15 PM, Wjhonson <[hidden email]> wrote:

> Does the Mediawiki software using a simple hashing on the passwords?
> Or are they also salted?
>
>
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Are passwords hashed and salted both?

WJhonson
Perfect! Thanks!


 

 

 

-----Original Message-----
From: Chris Steipp <[hidden email]>
To: MediaWiki announcements and site admin list <[hidden email]>
Sent: Thu, Oct 3, 2013 3:19 pm
Subject: Re: [MediaWiki-l] Are passwords hashed and salted both?


The default is md5( $salt - md5( $password ) ). So salt and 2 hashes.


On Thu, Oct 3, 2013 at 3:15 PM, Wjhonson <[hidden email]> wrote:

> Does the Mediawiki software using a simple hashing on the passwords?
> Or are they also salted?
>
>
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


 
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l