Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

https://github.com/bstnbuck/phauis

Password Hashing Algorithms used in Software
https://github.com/bstnbuck/phauis

password password-hashing-algorithms phauis

Last synced: 8 months ago
JSON representation

Password Hashing Algorithms used in Software

Awesome Lists containing this project

README 

          
**P**assword **H**ashing **A**lgorithms **u**sed **i**n **S**oftware pronounced as `[faus]` (with a silent *i*) is a simple overview of password hashing algorithms used in software with authentication capabilities. 



👉The goal is to evaluate the security of the algorithms used in the respective program.



## PHAuiS🔑



:grey_question: **Rating** is based on:


\* in combination with another symbol



* **Currently one of the best***: :heavy_check_mark:

* **Good but not perfect**: :green_circle:

* Moderate: :yellow_circle:

* *Bad*: :red_circle:

* *Couldn't be worse**: :x:



>*italic entry* = legacy or outdated source



Overview about typical algorithms and their rating



| PH-Algorithm | Rating | Explanation |

| --- | --- | --- |

| **Argon2(i/d/id)** (with/without Salt) | :green_circle::heavy_check_mark: | State-of-the-Art (Winner of Password Hashing Competition) [[1](https://www.password-hashing.net/)] [[2](https://github.com/P-H-C/phc-winner-argon2/blob/master/argon2-specs.pdf)] [[Git](https://github.com/p-h-c/phc-winner-argon2)] |

| Yescrypt (with/without Salt) | :green_circle::heavy_check_mark: | Password Hashing Competition finalist with special recognitions [[1](https://www.password-hashing.net/)] [[2](https://www.openwall.com/yescrypt/)]  |

| Catena (with/without Salt) | :green_circle::heavy_check_mark: | kind of scrypt, Password Hashing Competition finalist with special recognitions [[1](https://www.password-hashing.net/)] [[2](https://eprint.iacr.org/eprint-bin/getfile.pl?entry=2013/525&version=20130830:084400&file=525.pdf)]  |

| Lyra2 (with/without Salt) | :green_circle::heavy_check_mark: | Password Hashing Competition finalist with special recognitions [[1](https://www.password-hashing.net/)] [[2](https://ieeexplore.ieee.org/document/7377075)]  |

| Makwa (with/without Salt) | :green_circle::heavy_check_mark: | Password Hashing Competition finalist with special recognitions [[1](https://www.password-hashing.net/)] [[2](https://www.bolet.org/makwa/)]  |

| Pufferfish (with/without Salt) | :green_circle: | kind of blowfish, Password Hashing Competition finalist [[1](https://www.password-hashing.net/submissions.html)] [[2](https://github.com/epixoip/pufferfish)] |

| bcrypt (with/without Salt) | :green_circle: | kind of blowfish, crypt ($2a), [[1](https://www.usenix.org/legacy/events/usenix99/provos/provos.pdf)] [[2](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html)] |

| scrypt (with/without Salt) | :green_circle: | [[1](https://www.tarsnap.com/scrypt/scrypt.pdf)] [[2](https://datatracker.ietf.org/doc/html/rfc7914)] |

| PBKDF2 (with Salt and/or high key-stretching) | :green_circle: | [[1](https://web.archive.org/web/20170411220929/https://www.emc.com/collateral/white-papers/h11302-pkcs5v2-1-password-based-cryptography-standard-wp.pdf)] [[2](https://datatracker.ietf.org/doc/html/rfc2898)] [[3](https://mathiasbynens.be/notes/pbkdf2-hmac)]|

| SHA2/3 (with Salt and/or key-stretching) | :green_circle: | crypt (\$5, $6), [[1](https://man7.org/linux/man-pages/man3/crypt.3.html)] |

| Blake2b (with Salt and/or key-stretching) | :green_circle: | [[1](https://www.blake2.net/)] |

| PBKDF2 (without Salt and with high key-stretching) | :yellow_circle::green_circle: | |

| SHA2/3 512 bit (without Salt) | :yellow_circle::green_circle: |  |

| Blake2b 512 bit (without Salt) | :yellow_circle::green_circle: |  |

| SHA2/3 256 bit (without Salt) | :yellow_circle: | |

| RIPEMD-160 (with Salt and/or key-stretching) | :red_circle::yellow_circle: | [[1](https://link.springer.com/chapter/10.1007/978-3-031-30634-1_7)] [[2](https://homes.esat.kuleuven.be/~bosselae/ripemd160/pdf/AB-9601/AB-9601.pdf)] |

| SHA1 (with Salt and/or key-stretching) | :red_circle::yellow_circle: | collission + length extension attacks [[1](https://www.schneier.com/blog/archives/2005/02/sha1_broken.html)] [[2](http://people.csail.mit.edu/yiqun/SHA1AttackProceedingVersion.pdf)] [[3](https://eprint.iacr.org/2019/459.pdf)] |

| MD5 (with Salt and/or key-stretching) | :red_circle::yellow_circle: | crypt ($1), collission + length extension attacks [[1](https://eprint.iacr.org/2013/170.pdf)] [[2](https://www.zdnet.com/article/a-quarter-of-major-cmss-use-outdated-md5-as-the-default-password-hashing-scheme/)] |

| RIPEMD-160 (without Salt) | :red_circle: |  |

| SHA1 (without Salt) | :red_circle: |  |

| MD5 (without Salt) | :red_circle: |  |

| GOST (without Salt) | :red_circle: | collission + preimage attacks [[1](https://link.springer.com/chapter/10.1007/978-3-540-85174-5_10)] |

| MD4 (without/with Salt and/or key-stretching) | :red_circle::x: | Rainbow Tables available, Collission Attacks [[1](https://www.iacr.org/archive/fse2007/45930331/45930331.pdf)] |

| NTLM-Hash | :red_circle::x: | Based on MD4 without key-stretching, Salt, ..., [[1](https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview)] |

| DES | :red_circle::x: | obsolete Encryption-Algorithm, [[1](https://web.archive.org/web/20140226205104/http://origin-www.computer.org/csdl/mags/co/1977/06/01646525.pdf)] |

| LM-Hash | :red_circle::x: | Rainbow Tables available, Collission Attacks, [[1](https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview)] [[2](https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/prevent-windows-store-lm-hash-password)] |

| CRC32 | :red_circle::x: | just a error-detecting code |

| General: Any Encryption Algorithm | :red_circle: | Encryption Key is somewhere on the system?!? |



---



**Web-Applications / Software**



| Program name | Versions | PH-Algorithm → Rating | Sources | Extras + Date accessed |

| --- | --- | --- | --- | --- |

| *Adobe* | - | 3DES using ECB Mode → :red_circle::x: | [[1](https://www.zdnet.com/article/just-how-bad-are-the-top-100-passwords-from-the-adobe-hack-hint-think-really-really-bad/)] | password leak of 2013 
 → 19-02-2024|

| Aegis Authenticator | all | scrypt  → :green_circle: | [[1](https://github.com/beemdevelopment/Aegis)] | → 19-02-2024 |

| Ansible | all | MD5, blowfish  → :red_circle: 
 SHA256, SHA512 (default) (with Salt) → :green_circle: | [[1](https://docs.ansible.com/ansible/latest/collections/ansible/builtin/password_hash_filter.html)] | → 19-02-2024|

| Bareos | all | MD5  → :red_circle: | [[1](https://docs.bareos.org/include/autogenerated/autosummary/python-bareos/bareos.util.password.Password.html)] | → 19-02-2024 |

| Bitwarden, Vaultwarden | all | PBKDF2 (with Salt and/or key-stretching (default: 600.000)) → :green_circle: 
 or Argon2id (64MiB, 3 times, 4 threads) → :green_circle::heavy_check_mark: | [[1](https://bitwarden.com/de-DE/help/kdf-algorithms/)], [[2](https://github.com/dani-garcia/vaultwarden/blob/main/src/db/models/user.rs#L66)] | Salt is username/e-mail 
 → 19-02-2024 |

| CheckMK | >2.1.0p16 >2.2.0b1  | bcrypt  → :green_circle: 
 SHA256 (with Salt and/or key-stretching) → :green_circle: | [[1](https://checkmk.com/werk/14391)] | → 19-02-2024 |

| CheckMK | <=2.1.0p16 <=2.2.0b1  | DES → :red_circle::x: 
 MD5 (with Salt and/or key-stretching) → :red_circle::yellow_circle: 
 SHA256 (with Salt and/or key-stretching) → :green_circle: | [[1](https://checkmk.com/werk/14391)] | → 19-02-2024 |

| Drupal | all | based on PHP password_hash() (default: bcrypt) → :green_circle: | [[1](hhttps://www.drupal.org/node/3322420)] | → 19-02-2024|

| FileGator | all | bcrypt (without Salt) → :green_circle: | [[1](https://github.com/filegator/filegator/blob/master/backend/Utils/PasswordHash.php)] | → 19-02-2024|

| Froxlor | >= 2.0.0 | bcrypt → :green_circle: 
 Argon2(i,id) → :green_circle::heavy_check_mark: | [[1](https://github.com/Froxlor/Froxlor/blob/38d94698cec6c6ee3bb791492d1ec8864212b911/lib/Froxlor/System/Crypt.php#L97)] | versions <2.0.0 uses Linux crypt() (see Linux section) 
 → 19-02-2024|

| Gitea | all | bcrypt, scrypt, PBKDF2 (with Salt) → :green_circle: 
 Argon2 with Salt, time=2, memory=64*1024, threads=8, keyLen=50 → :green_circle::heavy_check_mark: | [[1](https://github.com/go-gitea/gitea/tree/main/modules/auth/password/hash)] | → 19-02-2024|

| Gophish | all | bcrypt (without Salt) → :green_circle: | [[1](https://github.com/gophish/gophish/blob/master/auth/auth.go#L48)] | → 19-02-2024|

| ILIAS e-Learning | >5.(0,1,2).X  | bcrypt (with/without Salt) → :green_circle: | [[1](https://docu.ilias.de/goto_docu_wiki_wpage_4198_1357.html)] | → 19-02-2024|

| ILIAS e-Learning | <5.(0,1,2).X  | MD5 without Salt → :red_circle: | [[1](https://docu.ilias.de/goto_docu_wiki_wpage_4198_1357.html)] | → 19-02-2024|

| ISPconfig | all | crypt Linux defaults → :red_circle::yellow_circle: or :green_circle:|  | → 19-02-2024|

| Joomla  | >4.0.0 |  MD5 (without Salt) → :red_circle: 
 bcrypt (default) → :green_circle: 
 Argon2(i, id) → :green_circle::heavy_check_mark: | [[1](https://github.com/joomla/joomla-cms/blob/4.4-dev/libraries/src/User/UserHelper.php)] | → 19-02-2024|

| Joplin | all, >3.2.1 | SHA256 (without Salt) → :yellow_circle: 
 PBKDF2 (with Salt and Key stretching (220.000)) → :green_circle: | [[1](https://github.com/laurent22/joplin/blob/0a5bc9647d3f955282b03154ae3164e9fe40e927/packages/lib/services/e2ee/EncryptionService.ts#L322)] [[2](https://github.com/laurent22/joplin/blob/0a5bc9647d3f955282b03154ae3164e9fe40e927/packages/lib/services/e2ee/EncryptionService.ts#L482)]| → 14-12-2024

| KeePass | >2.X | AES-KDF → :red_circle: 
 Argon2(d, id) → :green_circle::heavy_check_mark: | [[1](https://keepass.info/help/base/security.html)] |  → 19-02-2024|

| LastPass | - | PBKDF2 key-stretching 100.100 → :green_circle: | [[1](https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/)] | → 19-02-2024|

| LDAP | ? | SHA1, MD5 with and without Salt → :red_circle:, :red_circle::yellow_circle: 
 Linux crypt(3) (MD5, Blowfish, SHA2 (256, 512 bit)) with Salt and Key stretching → :red_circle::yellow_circle: up to :green_circle: | [[1](https://www.openldap.org/doc/admin24/security.html)] [[2](https://man7.org/linux/man-pages/man3/crypt.3.html)] [[3](https://www.rfc-editor.org/rfc/rfc4519.txt)] | official RFC specifies no encryption/hash 
 → 19-02-2024 |

| Mastodon | all | bcrypt → :green_circle: | [[1](https://github.com/mastodon/mastodon/pull/24654#issuecomment-1522279207)] | → 19-02-2024|

| Mediawiki | >=? - <1.33 | MD5 (with/without Salt) → :red_circle:, :red_circle::yellow_circle: 
 PBKDF2, bcrypt (with/without Salt) → :green_circle: | [[1](https://github.com/wikimedia/mediawiki/tree/master/includes/password)] | → 03-03-2024|

| Mediawiki | >=1.33| *MD5* (with/without Salt) → :red_circle:, :red_circle::yellow_circle: 
 PBKDF2, bcrypt (with/without Salt) → :green_circle: 
 Argon2(i, id) → :green_circle::heavy_check_mark: | [[1](https://github.com/wikimedia/mediawiki/tree/master/includes/password)] | → 03-03-2024|

| Moodle | <2.3 |  MD5 → :red_circle: | [[1](https://docs.moodle.org/405/en/Password_hashing)] | → 14-12-2024 |

| Moodle | 2.3 - 4.3 |  *MD5* → :red_circle: 
 bcrypt (with Salt) → :green_circle: | [[1](https://docs.moodle.org/405/en/Password_hashing)] | → 14-12-2024 |

| Moodle | >=4.3 |  *bcrypt* (with Salt) → :green_circle: 
 SHA512 (with Salt and key-stretching) → :green_circle: | [[1](https://docs.moodle.org/405/en/Password_hashing)] | → 14-12-2024 |

| MotionEye | all | SHA1 (without Salt) → :red_circle: | [[1](https://github.com/motioneye-project/motioneye/blob/72af3711d28175669ca06ab09913b788a5fd8617/motioneye/handlers/base.py#L115)] | → 14-12-2024 |

| MySQL | <4.1  | custom 16 Byte construct (broken) → :red_circle::x: | [[1](https://dev.mysql.com/blog-archive/protecting-mysql-passwords-with-the-sha256_password-plugin/)] | → 19-02-2024|

| MySQL/MariaDB mysql_native_password (default plugin) | > MySQL 4.1  | SHA1 construct with Salt and minimal key-stretching → :red_circle::yellow_circle: | [[1](https://mariadb.com/kb/en/authentication-plugin-mysql_native_password/)], [[2](https://dev.mysql.com/doc/refman/5.7/en/password-hashing.html)] | low key-stretching value, better algorithms available (ed25519 based, sha256 construct) [[3](https://mariadb.com/kb/en/authentication-plugin-ed25519/)] but not default, [[4](https://dev.mysql.com/blog-archive/protecting-mysql-passwords-with-the-sha256_password-plugin/)], this algorithm can be exploited [[5](https://github.com/cyrus-and/mysql-unsha1)] 
 → 19-02-2024|

| Nextcloud | all | bcrypt (without Salt) → :green_circle: | [[1](https://docs.nextcloud.com/server/latest/admin_manual/installation/harden_server.html#limit-on-password-length)] | → 19-02-2024|

| Microsoft Office | 2007 | SHA1 (with key-stretching 50.000) → :red_circle::yellow_circle: | [[1](https://en.wikipedia.org/wiki/Microsoft_Office_password_protection)] | → 04-04-2024|

| Microsoft Office | 2010 | SHA1 (with key-stretching 50.000) → :red_circle::yellow_circle: | [[1](https://eprint.iacr.org/2005/007.pdf)] | → 04-04-2024|

| Microsoft Office | 2013 | SHA1 (with key-stretching 100.000) → :red_circle::yellow_circle: 
 SHA512 (with key-stretching 100.000) → :green_circle: | [[1](https://docs.microsoft.com/en-us/previous-versions/office/office-2013-resource-kit/cc179125(v=office.15))] | → 04-04-2024|

| Microsoft Office | >= 2016 | SHA512 (with key-stretching 100.000) → :green_circle: | [[1](https://docs.microsoft.com/en-us/deployoffice/security/cryptography-and-encryption-in-office)] | → 04-04-2024|

| ownCloud core | all | bcrypt (without Salt) → :green_circle: | [[1](https://doc.owncloud.com/server/next/admin_manual/configuration/server/harden_server.html#limit-on-password-length)] | → 19-02-2024|

| PI-hole | all | SHA2 256 bit without Salt, key-stretching 2x → :yellow_circle: | [[1](https://github.com/pi-hole/web/blob/master/scripts/pi-hole/php/password.php#L42)] | → 19-02-2024|

| PostgreSQL  | >? |  Plain → :red_circle::x: 
 MD5 (without Salt) → :red_circle: 
 SCRAM-SHA-256 (like PBKDF2 with SHA256 and Salt (4096 iterations)) → :green_circle: | [[1](https://www.postgresql.org/docs/11/auth-password.html)] [[2](https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-PASSWORD-ENCRYPTION)] | → 19-02-2024|

| Prestashop  | all |  MD5 (with Salt) → :red_circle: | [[1](https://github.com/PrestaShop/PrestaShop/blob/develop/src/Core/Security/Hashing.php)] | → 19-02-2024|

| Typo3 | all | MD5 (with Salt) → :red_circle: 
 blowfish, phpass(with password stretching) → :red_circle: 
 PBKDF2, bcrypt (without Salt) → :green_circle: 
 Argon2(i, id) → :green_circle::heavy_check_mark: | [[1](https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/ApiOverview/PasswordHashing/Index.html)] | → 19-02-2024|

| *Slack* | - | SHA256 (with Salt) → :green_circle: | [[1](https://news.sophos.com/en-us/2022/08/08/slack-admits-to-leaking-hashed-passwords-for-three-months/)] | → 19-02-2024|

| urbackup | all | PBKDF2 with SHA512 Internet-User secret; without Salt, key-stretching 20.000 → :yellow_circle::green_circle: 
 PBKDF2 with MD5 Login-User; with Salt, key-stretching >0 → :yellow_circle:| [[1](https://www.urbackup.org/administration_manual.html#x1-250004.5)] [[2](https://github.com/uroni/urbackup_backend/blob/dev/urbackupserver/serverinterface/helper.cpp#L319)] | low key-stretching value 
 → 19-02-2024|

| wg-portal | all | bcrypt (without Salt) → :green_circle: | [[1](https://github.com/h44z/wg-portal/blob/master/internal/domain/user.go#L127)] | → 19-02-2024|

| Wordpress  | all |  MD5 (with Salt + minimal key stretching) → :red_circle: | [[1](https://developer.wordpress.org/reference/functions/wp_hash_password/)] | better algorithms just like Argon2id available with Plugins 
 → 19-02-2024 |

| Zammad  | all |  SHA256 (without Salt) → :yellow_circle: 
 Argon2(i) → :green_circle::heavy_check_mark: | [[1](https://github.com/zammad/zammad/blob/6abc8aad29575cdfb5af9d67cc2a37d0887fddcb/lib/password_hash.rb)] | → 03-03-2024 |



**Operating Systems**

| Program name | Versions | PH-Algorithm → Rating | Sources | Extras + Date accessed |

| --- | --- | --- | --- | --- |

| Linux (Debian, Ubuntu) | variable |  DES → :red_circle::x:
 MD5, SHA1 (with Salt and/or key-stretching) → :red_circle::yellow_circle: 
 bcrypt, scrypt, SHA256, SHA512 (with Salt and/or key-stretching) → :green_circle: 
 (gost-)yescrypt (with Salt) → :green_circle::heavy_check_mark:| [[1](https://man7.org/linux/man-pages/man3/crypt.3.html)] [[2](https://manpages.debian.org/testing/libcrypt-dev/crypt.5.en.html)] | based on current Debian specification 
 → 19-02-2024 |

| Windows |  NTLM-Hash → :red_circle::x:| [[1](https://learn.microsoft.com/de-de/troubleshoot/windows-server/windows-security/prevent-windows-store-lm-hash-password)] | → 19-02-2024 |

| Windows | >=Vista |  NTLM-Hash → :red_circle::x: | [[1](https://learn.microsoft.com/de-de/troubleshoot/windows-server/windows-security/prevent-windows-store-lm-hash-password)]| → 19-02-2024 |



> Last Update: 19-02-2024