brute forcing sha256 - need help locating salt in open source code
#6
PasswordHash does not seem to use AES (or any other type of decryption) at all. It seems to be just
sha256 (sha256 (sha256 ($pass)))

and therefore tripple sha256

I do not have an example hash, but I think that you are confusing hexadecimal lengths vs binary length.
sha256 is 32 raw bytes (binary) and therefore 64 (32 * 2) hexadecimal characters.


Messages In This Thread
RE: brute forcing sha256 - need help locating salt in open source code - by philsmd - 02-13-2018, 12:18 AM