DVZ Hash
Upgrades the password hash algorithm and converts old passwords on the fly.
Change Log for DVZ Hash
Version 1.2.1 stable Build #8
- Fixed algorithm smoke tests and improved UX in ACP's Benchmark
- Fixed PostgreSQL, SQLite compatibility issues
- Fixed PHP 8 compatibility issues
Upgrading: Overwrite plugin files.
Version 1.2 stable Build #7
- added
bcrypt
,argon2id
benchmark tool (Tools & Maintenance → DVZ Hash → Benchmark; PHP >= 7.4)
- changed on-the-fly rehashing to allow lower algorithm parameter values
- fixed unnecessary
argon2i
,argon2id
rehashing
- changed Preferred Algorithm setting to allow non-wrappable algorithms only
- minor improvements
Upgrading: Overwrite files, reactivate the plugin and update plugin settings.
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAl4Gd/wACgkQ4v2sXM44
p32sFQf9HBmloJT/Uh6chXcHzqmEpoDMslY+la/LGhGNuhlDLe3/i86d/dKFhnvp
Sc+nCxa3siBgRPccW5WBn4DIzRHnZPCsnXZ/UE8dCgSJcCNZwb3DBw2/71ZblAX4
9q313o6RUUqzDKv3yFUWNW0B8IZAybUgMgNb0ZQImlj9OQbKXRPbu2zfiFIg5sN/
kO3Z4MYVLxx6MYC88dKYA9pk7t84AZ3Zooheo8HnkM9s1dWW+v5fqiahGAyi7Nuc
myv44yRD9EimTGVUXrNWAa8cl1g9nAU39FT28kYw6Twe/WYSG8lhuxDaVOLCEENA
jRXMO1BXfsQfVHDQxjUM9UUv4xLnBA==
=x7c4
-----END PGP SIGNATURE-----
Version 1.1.2 stable Build #6
- added support for Argon2id (PHP >= 7.3)
Upgrading: Deactivate the plugin, overwrite files and activate. Update settings.
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAlwJTlYACgkQ4v2sXM44
p32XEgf/XRz6LAHxYFYp5NIC29JKkB1fBzcCJf9B+9DQ/ZvI/aaz2CcjeIwGJqnj
f5xCKtIIPXa4KWjDXCu95JXzdRDbPiR097AhpB8gD2RwHOnrb4qgrlv2HpUePFkp
QNAZDKpqp6mDvflIQYQzew2X/hTkm6TmjiSFUCQhsMpYiOZcJgG1d1XYURYs9xJP
WVT0Rk2Xo6v3haAdzir1xztIzT92oj7uXcW8hPSKaWD2ly6DogCTrGiOTaK8QLTy
0fNqntZc8Qn27iPK/dswoSjVmSve/3VM8JxymkBDYELOt04p9K/EDQ5UbkwWWNmj
kj9HuPL64ZRkLle/JLT9aOVh8WOCBA==
=LFrd
-----END PGP SIGNATURE-----
Version 1.1.1 stable Build #5
- fixed PostgreSQL compatibility issue during installation,
- defuse/php-encryption updated to 2.2.1
Upgrading: Overwrite files.
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAlthJE8ACgkQ4v2sXM44
p31uyQf+JsNUQPsOPooB1sEY0T7y5cJP3qC1tStOZK1f47p5qCLs/cYTzcG1Xqhr
WIo5RiLpH/anvpPmJowrOhOo/7+SnmaSD6dmJNqUxfd2P5pcfcI3humfyxD5Je/T
ItKfU/FG1vK7UarMk+Wv0mRBR+o7c/dJgsAYTjxXxg+hP9FdFbXORSGqVSQ47sOQ
NlHi1Lu1SD7K5keb62wtXY9k4oxo/azQgmYTToRXipxWOy6373JqnOq7II2UiBsT
dd+lvx3RoDlsE1WNCbQdZZezJURSRdO+lk0Omv6e2L9kQm1m/WxoZvFxpj7DER+6
/w04uXubVRdjzeVOeFfKKauRAjbkDg==
=FRUZ
-----END PGP SIGNATURE-----
Version 1.1 stable Build #4
Version 1.1:
- added argon2i and mybb_argon2i (PHP >= 7.2),
- applied algorithm downgrade process fixes & improvements,
- fixed minor hash encryption inconsistency issues,
- incorporated MyBB's default algorithm to be handled by the plugin
Updating: Revert all password downgrades, overwrite files, reactivate the plugin and update plugin settings.
-----BEGIN PGP SIGNATURE-----
iQEcBAABCAAGBQJZrwSzAAoJEOL9rFzOOKd9SXEH/AkFVfipllfbXD4zhla16KmI
p7QSRy5oGvpgLkkxXEeBXUamz+cH4cVeEz4EXwSgoLiTa95MsjflNdaWBgTm2moJ
95Dd9A9O1eh6I4+kk0W/qEvy8iEzWfxs2hk8Bs7+4sKSkcdOlj4S/35fcZw4/2gT
/tJWVi28AuPEmhtuAp88e4oMDcRQ5xjEzxUuHKJQ647bgEsIT5Ri2SHTJL3p0n1J
yYMggF49NTQOvwnJdW7BwjXk27IL/lEHIUiZos/8mY5hDtXfF9R+dOpMQdTfCqDN
IUPOJEqwIBGpLp99XB/cbxYXR5uPfJdXk5Q1n83MfFhgC9izkBR4em/Fmksshrs=
=4kes
-----END PGP SIGNATURE-----
Version 1.0.1 stable Build #3
1.0.1:
- fixed algorithm wrap candidate list,
- fixed database uninstallation,
- fixed decryption when default algorithm is used,
- fixed downgraded password issues,
- minor fixes
Upgrading: upload new files, remove inc/plugins/dvz_hash/algorithms/default_bcrypt.php, reactivate the plugin and execute SQL (if default_bcrypt was in use):
UPDATE `mybb_users` SET `password_algorithm` = 'mybb_bcrypt' WHERE `password_algorithm` = 'default_bcrypt'
-----BEGIN PGP SIGNATURE-----
iQEcBAABCAAGBQJY9nGKAAoJEOL9rFzOOKd9FF8H/RFjWoxBKhrCGYvLSzt1AtZl
uSQ/PLiXuR3PrXQaHxY4uad1Tn/Y5UPXX+Es0rR6MmcNiLoCR2ozp6pmvYOKVjCu
ymi87e0K+bsP+Y5l+wEBSaMg41B+pFc42y4RyV1zSqIVxsWEQxuklndFJ90w/iEI
rZ/N+5bxjCe34vBRbxfNrxqpvGDuQEtyWi/lEr3R0vClpoEvjFyLuXb3zNdtpaQ+
9Gmie/CMwK0tP+QL3T2PoHC0l7o9Q0zM/G66l5xB/FkKp+5bsS+vqvH3pqhjd005
MKqGK683urLuufi3j2KlL20SkP/LYfnJkZp3kkXPSlGDoY1FYH/Q/J3QAqnLSKs=
=s/8q
-----END PGP SIGNATURE-----
Version 1.0 stable Build #2
1.0
-----BEGIN PGP SIGNATURE-----
iQEcBAABCAAGBQJY7BPcAAoJEOL9rFzOOKd9P4AH/Aq7l5Z6ylwFoN23++kCMQJk
3wZQAL0vS0dyC4rFuzmEdhIU2PnLLn9G2ez4jx/wJq2pWhxiOpoP+u5sQeK9B0GI
Yh5k74SzErKJHlVk26qfNuh9ZN32QhfJBQuWG8Eev0HUyvYM3kS+asphDUs3TYPb
E4DfGhXZc6BNDfscD4eVHVOxCjb0IvBc4ausPDUYSP5rEuSIma8OUlAGuFc2pziL
DRK4EHrJt0IWDc2MPd+IBgJ6z3JAjGbiHgzZBLLx27dByJu2FLeM2l3jwvCt1fPH
MCeXQGgurS3cMY1H8tWkOoFZZ9/AKeMha5fjWdOSZ6fOKsvMQz2dDxFa3Jkxrpk=
=zXzx
-----END PGP SIGNATURE-----