By r0g on

I thought the new passwords were going to be the init, created and pass fields all concatenated together and rehashed with MD5 but I've just been looking at D7's users table and what is there is not a simple md5 hex hash.

In fact a look at passwords.inc shows the developers have fixed the issue of unsalted passwords in the database by replacing the old hash function with one whose complexity is on a par with the human genome or quantum physics :-/

Can anyone here explain the new password hash in relatively plain English / Pseudocode? I'd like to write some python / c code to convert old (v4 thru v6) passwords to new ones on the fly without recourse to the API* (or indeed PHP) if at all possible.

Cheers,

Roger.

* please don't tell me I shouldn't need/want to do this, I do, if you don't like that please just don't answer ;-)

⋅ Categories: Drupal 7.x