Whirlpool password hashing - Printable Version
+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Scripting and Plugins (https://sampforum.blast.hk/forumdisplay.php?fid=8)
+--- Forum: Scripting Help (https://sampforum.blast.hk/forumdisplay.php?fid=12)
+--- Thread: Whirlpool password hashing (/showthread.php?tid=438209)
+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Scripting and Plugins (https://sampforum.blast.hk/forumdisplay.php?fid=8)
+--- Forum: Scripting Help (https://sampforum.blast.hk/forumdisplay.php?fid=12)
+--- Thread: Whirlpool password hashing (/showthread.php?tid=438209)
Whirlpool password hashing - DiGiTaL_AnGeL - 19.05.2013
OK, so today I've decided to use Whirlpool for password hashing in DRP. But this problem desperates me. I'm modifying and testing for one hour, but no result. The variable for the password is 129 cells lenght and the buffer too. Here, the dialogs for register and login:
pawn Код:
case DIALOG_REGISTER:
{
if (!response) return Kick(playerid);
if(response)
{
if(!strlen(inputtext)) return ShowPlayerDialog(playerid, DIALOG_REGISTER, DIALOG_STYLE_INPUT, "Making your account...","{FF0000}You have entered an invalid password.\n{FFFFFF}Type your password below to register a new account.","Register","Quit");
new pass[129];
WP_Hash(pass, sizeof(pass), inputtext);
new INI:File = INI_Open(UserPath(playerid));
INI_SetTag(File,"data");
INI_WriteString(File, "Password", pass);
INI_WriteInt(File, "Cash", 1000);
INI_WriteInt(File, "Bank", 25000);
INI_WriteInt(File, "Admin", 0);
INI_WriteInt(File, "Moderator", 0);
INI_WriteInt(File, "VIP", 0);
INI_WriteInt(File, "Level", 1);
INI_WriteInt(File, "Kills", 0);
INI_WriteInt(File, "Deaths", 0);
INI_WriteInt(File, "Faction", 0);
INI_WriteInt(File, "FRank", 0);
INI_WriteInt(File, "SpawnCity", 0);
INI_WriteInt(File, "Tutorial", 0);
INI_WriteInt(File, "Car", 999);
INI_WriteInt(File, "Car2", 999);
INI_WriteInt(File, "Wanted", 0);
INI_WriteInt(File, "Warns", 0);
INI_WriteInt(File, "MuteTime", 0);
INI_WriteString(File, "sRank", " ");
INI_WriteInt(File, "Job", 0);
new day, month, year;
getdate(year, month, day);
format(string, sizeof(string), "%d.%d.%d", day, month, year);
INI_WriteString(File, "Register Date", string);
INI_Close(File);
INI_ParseFile(UserPath(playerid), "LoadUser_data", .bExtra = true, .extra = playerid);
ShowPlayerDialog(playerid, DIALOG_LOGIN, DIALOG_STYLE_PASSWORD, "Login", "Type your password to login.", "OK", "Quit");
}
}
case DIALOG_LOGIN:
{
if ( !response ) return Crash ( playerid );
if( response )
{
if(!strlen(inputtext)) return ShowPlayerDialog(playerid, DIALOG_LOGIN, DIALOG_STYLE_INPUT, "Login", "You must enter a password.", "OK", "Quit");
else
{
new password[129];
WP_Hash(password, sizeof(password), inputtext);
if(!strcmp(password, PlayerData[playerid][Pass]))
{
GivePlayerMoney(playerid, PlayerData[playerid][Cash]);
RespawnPlayer(playerid);
StopAudioStreamForPlayer(playerid);
loggedin[playerid] = 1;
}
else ShowPlayerDialog(playerid, DIALOG_LOGIN, DIALOG_STYLE_INPUT,"Login","{FF0000}You have entered an incorrect password.\n{FFFFFF}Type your password below to login.","Login","Exit");
}
}
}
pawn Код:
666847E02F6C42DE55BC690A1E107B290ADC45D56AC4DE195C02AA81DF1AD4047BDD47E03793F5072C06B7EA6E6CDD6A60D42A08774214AF34937860CF5A348B//good password
666847E02F6C42DE55BC690A1E107B290ADC45D56AC4DE195C02AA81DF1AD4047BDD47E03793F5072C06B7EA6E6CDD6A60D42A08774214AF34937860CF5A348//in the .ini file
Re: Whirlpool password hashing - [HiC]TheKiller - 19.05.2013
Maybe the ini system only wants to pass 128 characters (including the null character) at once. Personally, I would suggest stripping the whirlpool hash down to about 100 characters (doubt there would be many collisions at 100^100 combinations. I also suggest using multiple rounds of the hashing function and using a salt.
Re: Whirlpool password hashing - DiGiTaL_AnGeL - 19.05.2013
Tried using only 100 characters in WP_Hash but:
Quote:
|
WP Error: Insufficient buffer size (must be at least 129) |
Re: Whirlpool password hashing - IstuntmanI - 19.05.2013
Go to y_ini.inc and change MAX_INI_LINE to 130.
Re: Whirlpool password hashing - DiGiTaL_AnGeL - 19.05.2013
Quote:
|
Originally Posted by IstuntmanI
 Go to y_ini.inc and change MAX_INI_LINE to 130.
|
Re: Whirlpool password hashing - playbox12 - 19.05.2013
Quote:
|
Originally Posted by DiGiTaL_AnGeL
Modified, but I still can't login...
|
Re: Whirlpool password hashing - DiGiTaL_AnGeL - 19.05.2013
Quote:
|
Originally Posted by playbox12
Did you re enter the password in the ini file again?
|
Re: Whirlpool password hashing - Tamer - 19.05.2013
I think he ment replacing the password again (registering again)
Re: Whirlpool password hashing - [HiC]TheKiller - 19.05.2013
What I meant was something more along the lines of:
pawn Код:
new pass[129], apass[64];
WP_Hash(pass, sizeof(pass), inputtext);
strmid(apass, pass, 20, 84);
INI_WriteString(File, "Password", apass);