[issue42437] crypt produces wrong hashes for passwords containing dollar sign

Change by Eric V. Smith : -- resolution: -> not a bug stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Python-

[issue42437] crypt produces wrong hashes for passwords containing dollar sign

Christian Heimes added the comment: PS: Don't use crypt or SSHA512 format for passowrd hashing. You should use PBKDF2-HMAC, bcrypt, scrypt, or argon2 instead. SSHA512 is a dated algorithm and considered insecure. -- ___ Python tracker

[issue42437] crypt produces wrong hashes for passwords containing dollar sign

Christian Heimes added the comment: I assume that you called openssl from a shell. You did not use single quotes around in the first example: $ echo "cash$money" cash $ echo 'cash$money' cash$money $ openssl passwd -6 -salt 'C0UG33RcHmBVAjQ/' 'cash$money' $6$C0UG33RcHmBVAjQ/$Tm9aYQq7BsTT/awN6

[issue42437] crypt produces wrong hashes for passwords containing dollar sign

New submission from Микаела Стоичкова : I am having an issue with crypt library (Lib/crypt.py) when hashing passwords containing dolalr sign ("$") . I am using python 3.8.5 on Linux. To compare hashed passwords produced by crypt, I used openssl utilities. When generating hashes for password