[jboss-jira] [JBoss JIRA] (ELY-1435) Elytron BCrypt Mapper Not Working with jBCrypt

David Lloyd (JIRA) issues at jboss.org
Mon Nov 6 16:35:00 EST 2017


    [ https://issues.jboss.org/browse/ELY-1435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13486507#comment-13486507 ] 

David Lloyd commented on ELY-1435:
----------------------------------

Since it's not 100% clear what code generated what piece, I"ll just point out here that modular crypt (i.e. the password format which starts with "$2a$...") does not use the standard base64 alphabet; it uses a special mod-crypt one.  So if the above example was created similarly to the example code in the forum thread, it's never going to validate (with or without the invalid padding characters).

To encode an Elytron password into its modular-crypt form, do this:
{code:java}
import org.wildfly.security.password.util.ModularCrypt;

// ... and inside your method ...
    Password p = ...;
    String str = ModularCrypt.encodeAsString(p);
{code}

> Elytron BCrypt Mapper Not Working with jBCrypt
> ----------------------------------------------
>
>                 Key: ELY-1435
>                 URL: https://issues.jboss.org/browse/ELY-1435
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Passwords
>    Affects Versions: 1.0.0.Final
>         Environment: Wildfly 11.0.0.Final
> Windows Server 2008
> JDK 9.0.1
>            Reporter: Paul Carroll
>            Priority: Minor
>




--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list