From 0c201019475deedf6009a059efc45199f6026533 Mon Sep 17 00:00:00 2001 From: Xephi59 Date: Sat, 1 Aug 2015 03:03:54 +0200 Subject: [PATCH] Bcrypt only support $2a previously --- src/main/java/fr/xephi/authme/security/crypts/BCRYPT.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/fr/xephi/authme/security/crypts/BCRYPT.java b/src/main/java/fr/xephi/authme/security/crypts/BCRYPT.java index 5cfa87f0..847e9951 100644 --- a/src/main/java/fr/xephi/authme/security/crypts/BCRYPT.java +++ b/src/main/java/fr/xephi/authme/security/crypts/BCRYPT.java @@ -395,7 +395,7 @@ public class BCRYPT implements EncryptionMethod { off = 3; else { minor = salt.charAt(2); - if (minor != 'a' || salt.charAt(3) != '$') + if (minor < 'a' || minor > 'z' || salt.charAt(3) != '$') throw new IllegalArgumentException("Invalid salt revision"); off = 4; }