sha 512 password encryption

[jmcdon]

Hi,

I've spent a good deal of time trying to code php to match the shadow password encryption file that comes with the latest Linux distributions. Unfortunately, I've not succeeded in matching the requirements for sha-512 password encryption with a salt with php.

I did find two other ways to generate the proper password, first with mkpasswd:

$ mkpasswd -m sha-512 a_password AndSaltOn16Bytes
$6$AndSaltOn16Bytes$EANS9RTpU/IxJ2kLyN3/WtpqFuMBOorC/Pl9p.CqpMJ6yD3GfJdSPdkPHXcUvSPcTEZd6zxKSQ6Z1N9dewjkq1

and second with python:

python -c "import crypt; \
print crypt.crypt('a_password','\$6\$AndSaltOn16Bytes\$')"

$6$AndSaltOn16Bytes$EANS9RTpU/IxJ2kLyN3/WtpqFuMBOorC/Pl9p.CqpMJ6yD3GfJdSPdkPHXcUvSPcTEZd6zxKSQ6Z1N9dewjkq1

Aside from the trivial format of $6$SALT$PASSWORD+SALT, can someone translate the python to equivalent php? I've spent a lot of time on this and never had the php to match these encryptions.

Thanks in advance!
Jeff

[laserlight]

jmcdon wrote:

I've spent a good deal of time trying to code php to match the shadow password encryption file that comes with the latest Linux distributions. Unfortunately, I've not succeeded in matching the requirements for sha-512 password encryption with a salt with php.

I would suggest [man]crypt[/man], but it does not appear to support SHA-512. As such, I suggest that you read the source for mkpasswd (which should lead you to read the source of crypt)... but you probably will need to understand C in order to implement the algorithm in PHP. Within PHP, you can take advantage of the [man]hash[/man] function, but the parts that you need to know is how to apply the salt and how to convert to the given output format (apparently a representation of base 64 using the alphabet in both lower and upper case, the decimal digits, and a period and slash).

Alternatively, you could search around to see if anyone has already implemented something like this.