RealmD, Change hashing from SHA-1 to SHA-256

[lillecarl]

Well, basically i want to change the password hashing from SHA-1 to SHA-256 (To integrate MaNGOS realmd with Drupal)

In a post i found out that their "Version 7" uses SHA-256, as i can see it atleast (http://engineeredweb.com/blog/10/5/new-way-generate-hashes-drupal-7)

Will there be shitloads of work to convert to SHA-256 if i do not have any users in mangos?

- LilleCarl

[Patman128]

I'm pretty sure the client uses SHA-1 as the hash for SRP 6, so unless you modified that too, it's a no-go.

http://srp.stanford.edu/demo/demo.html

H() is SHA-1. It it used to get x both on the server in part 2, and in the client on part 3.

[lillecarl]

I'm pretty sure the client uses SHA-1 as the hash for SRP 6, so unless you modified that too, it's a no-go.

http://srp.stanford.edu/demo/demo.html

H() is SHA-1. It it used to get x both on the server in part 2, and in the client on part 3.

Well, "loong time ago" some emulators used plain passwords? So its not possible just to store them in some way? Or do i need to modify drupal instead?

Thank you for the answer by the way!

- LilleCarl

[idostyle]

Joomla with Jfusion as an alternative ?

Drupal and bridges or connectors or whatever they are called are a problematic story anyway.

[lillecarl]

Joomla with Jfusion as an alternative ?

Drupal and bridges or connectors or whatever they are called are a problematic story anyway.

Sorry but, what is jfusion?

But does jommla use sha1 hashing? (thank you)

EDIT: I have joomla with jfusion now, how do i make a SHA1 connector

- LilleCarl

[Patman128]

I'm pretty sure the client uses SHA-1 as the hash for SRP 6, so unless you modified that too, it's a no-go.

http://srp.stanford.edu/demo/demo.html

H() is SHA-1. It it used to get x both on the server in part 2, and in the client on part 3.

Well, "loong time ago" some emulators used plain passwords? So its not possible just to store them in some way? Or do i need to modify drupal instead?

Thank you for the answer by the way!

- LilleCarl

When it was done that way, the server would hash it when the person logged in, instead of once when the account is made. You would have to have SHA-1 or plaintext in addition to SHA-256.

[lillecarl]

I'm pretty sure the client uses SHA-1 as the hash for SRP 6, so unless you modified that too, it's a no-go.

http://srp.stanford.edu/demo/demo.html

H() is SHA-1. It it used to get x both on the server in part 2, and in the client on part 3.

Well, "loong time ago" some emulators used plain passwords? So its not possible just to store them in some way? Or do i need to modify drupal instead?

Thank you for the answer by the way!

- LilleCarl

When it was done that way, the server would hash it when the person logged in, instead of once when the account is made. You would have to have SHA-1 or plaintext in addition to SHA-256.

Oh i see, well i got joomla and jfusion, but there is something wrong with jfusion so im sitting here slitting my hair atm Well i think this topic is meanless now