You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have an app that has used Scrypt for a long time. We are currently trying to move away from this and planning to use a 3rd party product for auth. But we have a number of customers using the hash generated by this gem. We were hoping to migrate the users to our new platform by using the same configs and parameters used to generate the password hashes. But that doesn't seem to work.
We created a new hash, figured out the values for n, r, p, salt and secret and generated the hash using
salt + '$' + scrypt(secret.to_s,salt_only,cost,key_len).unpack('H*').first.rjust(key_len * 2,'0')
This was found to be the same as the hash that was generated when we use this library.
But when we try to regenerate this same hash using some other product using the same params, we were not successful.
An example is this tool: https://www.browserling.com/tools/scrypt
Our 3rd party product and this tool got the same hash with these params and the hash was different from the one generated by this gem. Can I get some help in navigating this?
Thanks,
Toby
The text was updated successfully, but these errors were encountered:
Hi,
We have an app that has used Scrypt for a long time. We are currently trying to move away from this and planning to use a 3rd party product for auth. But we have a number of customers using the hash generated by this gem. We were hoping to migrate the users to our new platform by using the same configs and parameters used to generate the password hashes. But that doesn't seem to work.
We created a new hash, figured out the values for n, r, p, salt and secret and generated the hash using
scrypt/lib/scrypt/engine.rb
Line 73 in f1aef42
This was found to be the same as the hash that was generated when we use this library.
But when we try to regenerate this same hash using some other product using the same params, we were not successful.
An example is this tool: https://www.browserling.com/tools/scrypt
Our 3rd party product and this tool got the same hash with these params and the hash was different from the one generated by this gem. Can I get some help in navigating this?
Thanks,
Toby
The text was updated successfully, but these errors were encountered: