You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@shiro.apache.org by "lprimak (via GitHub)" <gi...@apache.org> on 2025/10/21 16:15:19 UTC

[I] [Bug] BCrypt algorithm is not usable because it's mis-named [shiro]

lprimak opened a new issue, #2328:
URL: https://github.com/apache/shiro/issues/2328

   ### Search before asking
   
   - [x] I had searched in the [issues, **including closed issues**](https://github.com/apache/shiro/issues?q=is%3Aissue) and found no similar issues.
   
   
   ### Environment
   
   BCrypt algo names are "2y" "2b" etc. They should be "bcrypt2y" and similar. The cryptic naming makes this algorithm ususable
   
   ### Shiro version
   
   2.0.0 and later
   
   ### What was the actual outcome?
   
   bcrypt algorithms should be usable
   
   ### What was the expected outcome?
   
   N/A
   
   ### How to reproduce
   
   N/A
   
   ### Debug logs
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org

Re: [I] [Bug] BCrypt algorithm is not usable because it's mis-named [shiro]

Posted by "bmarwell (via GitHub)" <gi...@apache.org>.
bmarwell commented on issue #2328:
URL: https://github.com/apache/shiro/issues/2328#issuecomment-3446561680

   Yes, absolutely.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org

Re: [I] [Bug] BCrypt algorithm is not usable because it's mis-named [shiro]

Posted by "lprimak (via GitHub)" <gi...@apache.org>.
lprimak commented on issue #2328:
URL: https://github.com/apache/shiro/issues/2328#issuecomment-3440404539

   I modified the PR to include both long and short name. Format of the password is not changed anymore.
   I think this would satisfy your concerns.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org

Re: [I] [Bug] BCrypt algorithm is not usable because it's mis-named [shiro]

Posted by "bmarwell (via GitHub)" <gi...@apache.org>.
bmarwell commented on issue #2328:
URL: https://github.com/apache/shiro/issues/2328#issuecomment-3439320387

   Veto. Don't do this. 
   It's common format, and this would make Shiro the odd man out.
   
   https://httpd.apache.org/docs/2.4/misc/password_encryptions.html
   
   Also in /etc/passwd.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org

Re: [I] [Bug] BCrypt algorithm is not usable because it's mis-named [shiro]

Posted by "bmarwell (via GitHub)" <gi...@apache.org>.
bmarwell closed issue #2328: [Bug] BCrypt algorithm is not usable because it's mis-named
URL: https://github.com/apache/shiro/issues/2328


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org