Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -14 down vote favorite
8  
for the benefit of those who are not automatically familiar with some vague reference to "the 13 year old bug", perhaps explain what you mean, and don't rely only on a link to an external site - put all relevant information in your question. Please see the FAQ and How to Ask. – AviD♦ Jun 21 '11 at 17:32

closed as not a real question by D3C4FF, Adnan, TildalWave, Luc, Gilles May 29 at 10:03

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

1 Answer

up vote 3 down vote accepted

No, this only affected Solar Designer's implementation of Blowfish which was used in John The Ripper and later crypt_blowfish. It was detected precisely because the result was not compatible with OpenBSD's implementation, which did not have the bug. Quoting him from here, "which made the hashes incompatible with OpenBSD's for passwords with non-ASCII characters".

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.