DVZ Hash

by Devilshakerz 17 Stars 1,316 Downloads

Upgrades the password hash algorithm and converts old passwords on the fly.

Change Log for DVZ Hash

Version 1.2.1 stable Build #8

  • Fixed algorithm smoke tests and improved UX in ACP's Benchmark
  • Fixed PostgreSQL, SQLite compatibility issues
  • Fixed PHP 8 compatibility issues

Upgrading: Overwrite plugin files.

Version 1.2 stable Build #7

  • added bcrypt, argon2id benchmark tool (Tools & Maintenance → DVZ Hash → Benchmark; PHP >= 7.4)
  • changed on-the-fly rehashing to allow lower algorithm parameter values
  • fixed unnecessary argon2i, argon2id rehashing
  • changed Preferred Algorithm setting to allow non-wrappable algorithms only
  • minor improvements

Upgrading: Overwrite files, reactivate the plugin and update plugin settings.

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAl4Gd/wACgkQ4v2sXM44
p32sFQf9HBmloJT/Uh6chXcHzqmEpoDMslY+la/LGhGNuhlDLe3/i86d/dKFhnvp
Sc+nCxa3siBgRPccW5WBn4DIzRHnZPCsnXZ/UE8dCgSJcCNZwb3DBw2/71ZblAX4
9q313o6RUUqzDKv3yFUWNW0B8IZAybUgMgNb0ZQImlj9OQbKXRPbu2zfiFIg5sN/
kO3Z4MYVLxx6MYC88dKYA9pk7t84AZ3Zooheo8HnkM9s1dWW+v5fqiahGAyi7Nuc
myv44yRD9EimTGVUXrNWAa8cl1g9nAU39FT28kYw6Twe/WYSG8lhuxDaVOLCEENA
jRXMO1BXfsQfVHDQxjUM9UUv4xLnBA==
=x7c4
-----END PGP SIGNATURE-----

Version 1.1.2 stable Build #6

  • added support for Argon2id (PHP >= 7.3)

Upgrading: Deactivate the plugin, overwrite files and activate. Update settings.

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAlwJTlYACgkQ4v2sXM44
p32XEgf/XRz6LAHxYFYp5NIC29JKkB1fBzcCJf9B+9DQ/ZvI/aaz2CcjeIwGJqnj
f5xCKtIIPXa4KWjDXCu95JXzdRDbPiR097AhpB8gD2RwHOnrb4qgrlv2HpUePFkp
QNAZDKpqp6mDvflIQYQzew2X/hTkm6TmjiSFUCQhsMpYiOZcJgG1d1XYURYs9xJP
WVT0Rk2Xo6v3haAdzir1xztIzT92oj7uXcW8hPSKaWD2ly6DogCTrGiOTaK8QLTy
0fNqntZc8Qn27iPK/dswoSjVmSve/3VM8JxymkBDYELOt04p9K/EDQ5UbkwWWNmj
kj9HuPL64ZRkLle/JLT9aOVh8WOCBA==
=LFrd
-----END PGP SIGNATURE-----

Version 1.1.1 stable Build #5

  • fixed PostgreSQL compatibility issue during installation,
  • defuse/php-encryption updated to 2.2.1

Upgrading: Overwrite files.

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAlthJE8ACgkQ4v2sXM44
p31uyQf+JsNUQPsOPooB1sEY0T7y5cJP3qC1tStOZK1f47p5qCLs/cYTzcG1Xqhr
WIo5RiLpH/anvpPmJowrOhOo/7+SnmaSD6dmJNqUxfd2P5pcfcI3humfyxD5Je/T
ItKfU/FG1vK7UarMk+Wv0mRBR+o7c/dJgsAYTjxXxg+hP9FdFbXORSGqVSQ47sOQ
NlHi1Lu1SD7K5keb62wtXY9k4oxo/azQgmYTToRXipxWOy6373JqnOq7II2UiBsT
dd+lvx3RoDlsE1WNCbQdZZezJURSRdO+lk0Omv6e2L9kQm1m/WxoZvFxpj7DER+6
/w04uXubVRdjzeVOeFfKKauRAjbkDg==
=FRUZ
-----END PGP SIGNATURE-----

Version 1.1 stable Build #4

Version 1.1:

  • added argon2i and mybb_argon2i (PHP >= 7.2),
  • applied algorithm downgrade process fixes & improvements,
  • fixed minor hash encryption inconsistency issues,
  • incorporated MyBB's default algorithm to be handled by the plugin

Updating: Revert all password downgrades, overwrite files, reactivate the plugin and update plugin settings.

-----BEGIN PGP SIGNATURE-----

iQEcBAABCAAGBQJZrwSzAAoJEOL9rFzOOKd9SXEH/AkFVfipllfbXD4zhla16KmI
p7QSRy5oGvpgLkkxXEeBXUamz+cH4cVeEz4EXwSgoLiTa95MsjflNdaWBgTm2moJ
95Dd9A9O1eh6I4+kk0W/qEvy8iEzWfxs2hk8Bs7+4sKSkcdOlj4S/35fcZw4/2gT
/tJWVi28AuPEmhtuAp88e4oMDcRQ5xjEzxUuHKJQ647bgEsIT5Ri2SHTJL3p0n1J
yYMggF49NTQOvwnJdW7BwjXk27IL/lEHIUiZos/8mY5hDtXfF9R+dOpMQdTfCqDN
IUPOJEqwIBGpLp99XB/cbxYXR5uPfJdXk5Q1n83MfFhgC9izkBR4em/Fmksshrs=
=4kes
-----END PGP SIGNATURE-----

Version 1.0.1 stable Build #3

1.0.1:

  • fixed algorithm wrap candidate list,
  • fixed database uninstallation,
  • fixed decryption when default algorithm is used,
  • fixed downgraded password issues,
  • minor fixes

Upgrading: upload new files, remove inc/plugins/dvz_hash/algorithms/default_bcrypt.php, reactivate the plugin and execute SQL (if default_bcrypt was in use):
UPDATE `mybb_users` SET `password_algorithm` = 'mybb_bcrypt' WHERE `password_algorithm` = 'default_bcrypt'

-----BEGIN PGP SIGNATURE-----

iQEcBAABCAAGBQJY9nGKAAoJEOL9rFzOOKd9FF8H/RFjWoxBKhrCGYvLSzt1AtZl
uSQ/PLiXuR3PrXQaHxY4uad1Tn/Y5UPXX+Es0rR6MmcNiLoCR2ozp6pmvYOKVjCu
ymi87e0K+bsP+Y5l+wEBSaMg41B+pFc42y4RyV1zSqIVxsWEQxuklndFJ90w/iEI
rZ/N+5bxjCe34vBRbxfNrxqpvGDuQEtyWi/lEr3R0vClpoEvjFyLuXb3zNdtpaQ+
9Gmie/CMwK0tP+QL3T2PoHC0l7o9Q0zM/G66l5xB/FkKp+5bsS+vqvH3pqhjd005
MKqGK683urLuufi3j2KlL20SkP/LYfnJkZp3kkXPSlGDoY1FYH/Q/J3QAqnLSKs=
=s/8q
-----END PGP SIGNATURE-----

Version 1.0 stable Build #2

1.0

-----BEGIN PGP SIGNATURE-----

iQEcBAABCAAGBQJY7BPcAAoJEOL9rFzOOKd9P4AH/Aq7l5Z6ylwFoN23++kCMQJk
3wZQAL0vS0dyC4rFuzmEdhIU2PnLLn9G2ez4jx/wJq2pWhxiOpoP+u5sQeK9B0GI
Yh5k74SzErKJHlVk26qfNuh9ZN32QhfJBQuWG8Eev0HUyvYM3kS+asphDUs3TYPb
E4DfGhXZc6BNDfscD4eVHVOxCjb0IvBc4ausPDUYSP5rEuSIma8OUlAGuFc2pziL
DRK4EHrJt0IWDc2MPd+IBgJ6z3JAjGbiHgzZBLLx27dByJu2FLeM2l3jwvCt1fPH
MCeXQGgurS3cMY1H8tWkOoFZZ9/AKeMha5fjWdOSZ6fOKsvMQz2dDxFa3Jkxrpk=
=zXzx
-----END PGP SIGNATURE-----