Skip to content

Instantly share code, notes, and snippets.

@roycewilliams
Last active March 23, 2019 18:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save roycewilliams/e9b8155c5632025cb0e8623e4dda61f3 to your computer and use it in GitHub Desktop.
Save roycewilliams/e9b8155c5632025cb0e8623e4dda61f3 to your computer and use it in GitHub Desktop.
nested-bcrypt-examples.txt
------------------------------------------------------------------------------
# Examples of nested bcrypt
# using both binary (expected) and ASCII (naive) forms of each core hash
#
# Last updated 2019-03-23
------------------------------------------------------------------------------
Types most likely to encounter in the wild:
* bcrypt(base64(sha256_bin(password))) - passlib 'bcrypt-sha256' format
Ref: https://passlib.readthedocs.io/en/stable/lib/passlib.hash.bcrypt_sha256.html
Represented plains: password hashcat test 123456
Represented inner hashes: md5 sha1 sha224 sha256 sha3-224 sha3-256 tiger ripemd160 whirlpool
Strings that are longer than 72 characters will be silently truncated by bcrypt.
------------------------------------------------------------------------------
Plain: 'password'
- md5('password'): 5f4dcc3b5aa765d61d8327deb882cf99
-- binary md5 hash:
--- base64(md5_bin('password')): X03MO1qnZdYdgyfeuILPmQ==, length 24
--- bcrypt(base64(md5_bin('password'))): $2a$12$Sn0Q5ZJbHxV9BMGUEqxHEOxMM0laiHCuMJqs4azEiw3fu1P2xDBNe
-- ASCII md5 hash (naive):
--- base64(md5_asc('password')): NWY0ZGNjM2I1YWE3NjVkNjFkODMyN2RlYjg4MmNmOTkK, length 44
--- bcrypt(base64(md5_asc('password'))): $2a$12$hIZRtZu3dUqSiKgbq/CEYO.ZOhY9X689R45erGwm7agi7Z10atKK2
- sha1('password'): 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
-- binary sha1 hash:
--- base64(sha1_bin('password')): W6ph5Mm5Pz8GgiULbPgzG37mj9g=, length 28
--- bcrypt(base64(sha1_bin('password'))): $2a$12$v6Ys8KFtS7FbwpRfPpMI1.rAa1zHNJkzAIugv/s7YU2xCzrSw8hBu
-- ASCII sha1 hash (naive):
--- base64(sha1_asc('password')): NWJhYTYxZTRjOWI5M2YzZjA2ODIyNTBiNmNmODMzMWI3ZWU2OGZkOAo=, length 56
--- bcrypt(base64(sha1_asc('password'))): $2a$12$H/GQLUgtJKmqLDUBSgMekOaQZe4q2Mot63r7h4.uu.M3xGLxrLdYC
- sha224('password'): d63dc919e201d7bc4c825630d2cf25fdc93d4b2f0d46706d29038d01
-- binary sha224 hash:
--- base64(sha224_bin('password')): 1j3JGeIB17xMglYw0s8l/ck9Sy8NRnBtKQONAQ==, length 40
--- bcrypt(base64(sha224_bin('password'))): $2a$12$kOwvIvqssMvN.zBZtfb9nOc.MzRkIrVNNpQJYWQMG21UZoJ9M1Mna
-- ASCII sha224 hash (naive):
--- base64(sha224_asc('password')): ZDYzZGM5MTllMjAxZDdiYzRjODI1NjMwZDJjZjI1ZmRjOTNkNGIyZjBkNDY3MDZkMjkwMzhkMDEK, length 76
--- bcrypt(base64(sha224_asc('password'))): $2a$12$J6iGD9ODq0SW8MoN2rGFGO8ag/vrwHq5N0P25KYDgtPpOJej3n4Y2
- sha256('password'): 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
-- binary sha256 hash:
--- base64(sha256_bin('password')): XohImNooBHFR0OVvjcYpJ3NgPQ1qq73WKhHvch0VQtg=, length 44
--- bcrypt(base64(sha256_bin('password'))): $2a$12$2Ze5KdFWMc.23R6GU3SuD..N6pOBH80XNrmC7D39xNY.hZNOPg0fG
-- ASCII sha256 hash (naive):
--- base64(sha256_asc('password')): NWU4ODQ4OThkYTI4MDQ3MTUxZDBlNTZmOGRjNjI5Mjc3MzYwM2QwZDZhYWJiZGQ2MmExMWVmNzIxZDE1NDJkOAo=, length 88
--- bcrypt(base64(sha256_asc('password'))): $2a$12$K2N8Ec2INB5MjsSuF53Aa.0wnUEcVzlXpjkQ3t8NcnCxIELZJet3W
- sha3-224('password'): c3f847612c3780385a859a1993dfd9fe7c4e6d7f477148e527e9374c
-- binary sha3-224 hash:
--- base64(sha3-224_bin('password')): w/hHYSw3gDhahZoZk9/Z/nxObX9HcUjlJ+k3TA==, length 40
--- bcrypt(base64(sha3-224_bin('password'))): $2a$12$Ji3V85vIv.RLWXs4ikbg/exhEuB3atVXDOVoBzQw2saohmdsW4Xsq
-- ASCII sha3-224 hash (naive):
--- base64(sha3-224_asc('password')): YzNmODQ3NjEyYzM3ODAzODVhODU5YTE5OTNkZmQ5ZmU3YzRlNmQ3ZjQ3NzE0OGU1MjdlOTM3NGMK, length 76
--- bcrypt(base64(sha3-224_asc('password'))): $2a$12$Jv8wIuYx0JIaC89aP1O2Nupw6EtRk3Shpi1isE2LRD8eJibcZ6xUS
- sha3-256('password'): c0067d4af4e87f00dbac63b6156828237059172d1bbeac67427345d6a9fda484
-- binary sha3-256 hash:
--- base64(sha3-256_bin('password')): wAZ9SvTofwDbrGO2FWgoI3BZFy0bvqxnQnNF1qn9pIQ=, length 44
--- bcrypt(base64(sha3-256_bin('password'))): $2a$12$3u1NN8tZjQnaguwesNGbUup9r01rXa38YP2Qdx2Lves5A7WT4ouOK
-- ASCII sha3-256 hash (naive):
--- base64(sha3-256_asc('password')): YzAwNjdkNGFmNGU4N2YwMGRiYWM2M2I2MTU2ODI4MjM3MDU5MTcyZDFiYmVhYzY3NDI3MzQ1ZDZhOWZkYTQ4NAo=, length 88
--- bcrypt(base64(sha3-256_asc('password'))): $2a$12$h2nnkq2DZbB8wRqS3d6bQuEPKVQYaptDBc1THsK5xWGChAkcELm6a
- tiger('password'): d476a6b8b5c35ce912781497d02d09faeb8aa05a489223f5
-- binary tiger hash:
--- base64(tiger_bin('password')): 1HamuLXDXOkSeBSX0C0J+uuKoFpIkiP1, length 32
--- bcrypt(base64(tiger_bin('password'))): $2a$12$.EmMpR8.ZBEzls0xQfTV6OH5.cNAYuK1UQ5s8zNS4WvgSFIsafVla
-- ASCII tiger hash (naive):
--- base64(tiger_asc('password')): ZDQ3NmE2YjhiNWMzNWNlOTEyNzgxNDk3ZDAyZDA5ZmFlYjhhYTA1YTQ4OTIyM2Y1Cg==, length 68
--- bcrypt(base64(tiger_asc('password'))): $2a$12$Xv3T3K5dBNu2MF/8LZoa4.LYn90nYtAz1KPV1vjORa44hQGaMlzk6
- ripemd160('password'): 2c08e8f5884750a7b99f6f2f342fc638db25ff31
-- binary ripemd160 hash:
--- base64(ripemd160_bin('password')): LAjo9YhHUKe5n28vNC/GONsl/zE=, length 28
--- bcrypt(base64(ripemd160_bin('password'))): $2a$12$uWNwcJV61dRSzeWgwgPIV.xRGkSot3nBqJhXuPTA8OsneVsinaacm
-- ASCII ripemd160 hash (naive):
--- base64(ripemd160_asc('password')): MmMwOGU4ZjU4ODQ3NTBhN2I5OWY2ZjJmMzQyZmM2MzhkYjI1ZmYzMQo=, length 56
--- bcrypt(base64(ripemd160_asc('password'))): $2a$12$5rQKfIWK5n.WlSlPY.OLGefj3qLi.GufehlhUDxODgxd9MZDRa4bO
- whirlpool('password'): 74dfc2b27acfa364da55f93a5caee29ccad3557247eda238831b3e9bd931b01d77fe994e4f12b9d4cfa92a124461d2065197d8cf7f33fc88566da2db2a4d6eae
-- binary whirlpool hash:
--- base64(whirlpool_bin('password')): dN/CsnrPo2TaVfk6XK7inMrTVXJH7aI4gxs+m9kxsB13/plOTxK51M+pKhJEYdIGUZfYz38z/IhWbaLbKk1urg==, length 88
--- bcrypt(base64(whirlpool_bin('password'))): $2a$12$QLJPcdrcgLq/oSu.zB/7SOBbITsTXCM65PBAq67.CqFjaGzXBEb/6
-- ASCII whirlpool hash (naive):
--- base64(whirlpool_asc('password')): NzRkZmMyYjI3YWNmYTM2NGRhNTVmOTNhNWNhZWUyOWNjYWQzNTU3MjQ3ZWRhMjM4ODMxYjNlOWJkOTMxYjAxZDc3ZmU5OTRlNGYxMmI5ZDRjZmE5MmExMjQ0NjFkMjA2NTE5N2Q4Y2Y3ZjMzZmM4ODU2NmRhMmRiMmE0ZDZlYWUK, length 172
--- bcrypt(base64(whirlpool_asc('password'))): $2a$12$h11vEYI93AzYCfFiJ6xGSO0LN7n92PLGQ1iaL0MvgxgDbhjagDQN.
Plain: 'hashcat'
- md5('hashcat'): 8743b52063cd84097a65d1633f5c74f5
-- binary md5 hash:
--- base64(md5_bin('hashcat')): h0O1IGPNhAl6ZdFjP1x09Q==, length 24
--- bcrypt(base64(md5_bin('hashcat'))): $2a$12$Sx0HmD6eCYF4xQRwbsWQ0uRaqPI1UsAu2h7baJKKvB9eV9K5N5P1a
-- ASCII md5 hash (naive):
--- base64(md5_asc('hashcat')): ODc0M2I1MjA2M2NkODQwOTdhNjVkMTYzM2Y1Yzc0ZjUK, length 44
--- bcrypt(base64(md5_asc('hashcat'))): $2a$12$YSM1W.PHmS33e7XmqTR8duWzaBpSG/gpkHVbYMNexF08CJWb/F54S
- sha1('hashcat'): b89eaac7e61417341b710b727768294d0e6a277b
-- binary sha1 hash:
--- base64(sha1_bin('hashcat')): uJ6qx+YUFzQbcQtyd2gpTQ5qJ3s=, length 28
--- bcrypt(base64(sha1_bin('hashcat'))): $2a$12$GGmIltD1Z3CaJAeZicF5SOZfJcKrib0WETTc1kVO0OZ42F9/oeadm
-- ASCII sha1 hash (naive):
--- base64(sha1_asc('hashcat')): Yjg5ZWFhYzdlNjE0MTczNDFiNzEwYjcyNzc2ODI5NGQwZTZhMjc3Ygo=, length 56
--- bcrypt(base64(sha1_asc('hashcat'))): $2a$12$z/aSTKc8VYnV0reof2W6.eUUNsjTX7kai10uiMfXkEE2vQ7oEF5ja
- sha224('hashcat'): e4fa1555ad877bf0ec455483371867200eee89550a93eff2f95a6198
-- binary sha224 hash:
--- base64(sha224_bin('hashcat')): 5PoVVa2He/DsRVSDNxhnIA7uiVUKk+/y+VphmA==, length 40
--- bcrypt(base64(sha224_bin('hashcat'))): $2a$12$N0wPbeeMGmzo7mf03GLvw.NHujZ0NBmKcg5ElZS0uxtor7Ym3QdXK
-- ASCII sha224 hash (naive):
--- base64(sha224_asc('hashcat')): ZTRmYTE1NTVhZDg3N2JmMGVjNDU1NDgzMzcxODY3MjAwZWVlODk1NTBhOTNlZmYyZjk1YTYxOTgK, length 76
--- bcrypt(base64(sha224_asc('hashcat'))): $2a$12$8B1JcsNFDvafV1mLOjr9aesvHJ5wNqo1Da24N1CfeBHRvPIEUBl96
- sha256('hashcat'): 127e6fbfe24a750e72930c220a8e138275656b8e5d8f48a98c3c92df2caba935
-- binary sha256 hash:
--- base64(sha256_bin('hashcat')): En5vv+JKdQ5ykwwiCo4TgnVla45dj0ipjDyS3yyrqTU=, length 44
--- bcrypt(base64(sha256_bin('hashcat'))): $2a$12$kfKpawkr.GPI/KwKSIhR2e8A9IKWz/Ullei2TFtg2nC3ahlUkRobO
-- ASCII sha256 hash (naive):
--- base64(sha256_asc('hashcat')): MTI3ZTZmYmZlMjRhNzUwZTcyOTMwYzIyMGE4ZTEzODI3NTY1NmI4ZTVkOGY0OGE5OGMzYzkyZGYyY2FiYTkzNQo=, length 88
--- bcrypt(base64(sha256_asc('hashcat'))): $2a$12$zF3h1e8wixQvai7LX0XBTOG7bOv1wJqUiZxaN98XZ7avXFba78Chu
- sha3-224('hashcat'): 412ef78534ba6ab0e9b1607d3e9767a25c1ea9d5e83176b4c2817a6c
-- binary sha3-224 hash:
--- base64(sha3-224_bin('hashcat')): QS73hTS6arDpsWB9PpdnolweqdXoMXa0woF6bA==, length 40
--- bcrypt(base64(sha3-224_bin('hashcat'))): $2a$12$m3MbuPG/pirHUldfC7rxmeh28rj1biU4bddEpIYuqztKQE1VJMfQK
-- ASCII sha3-224 hash (naive):
--- base64(sha3-224_asc('hashcat')): NDEyZWY3ODUzNGJhNmFiMGU5YjE2MDdkM2U5NzY3YTI1YzFlYTlkNWU4MzE3NmI0YzI4MTdhNmMK, length 76
--- bcrypt(base64(sha3-224_asc('hashcat'))): $2a$12$B.K.FEsvtW2AWvHpcjK6EurG81OhQPa5emaxrrQNm4wWV31UQJzHO
- sha3-256('hashcat'): d60fcf6585da4e17224f58858970f0ed5ab042c3916b76b0b828e62eaf636cbd
-- binary sha3-256 hash:
--- base64(sha3-256_bin('hashcat')): 1g/PZYXaThciT1iFiXDw7VqwQsORa3awuCjmLq9jbL0=, length 44
--- bcrypt(base64(sha3-256_bin('hashcat'))): $2a$12$0H2viaBV0UmjNEC5FrPSIu2alSfFpNmVL1bhvdNjocstq6oZu7H2O
-- ASCII sha3-256 hash (naive):
--- base64(sha3-256_asc('hashcat')): ZDYwZmNmNjU4NWRhNGUxNzIyNGY1ODg1ODk3MGYwZWQ1YWIwNDJjMzkxNmI3NmIwYjgyOGU2MmVhZjYzNmNiZAo=, length 88
--- bcrypt(base64(sha3-256_asc('hashcat'))): $2a$12$aOipaIl9pDUDmGrLbSP0r.jCI6tj0xkwq4u5iEfmIXSQ19OkBhqwm
- tiger('hashcat'): 6e2d24e09a70a02bdd9c4885ea199b064982130432331b44
-- binary tiger hash:
--- base64(tiger_bin('hashcat')): bi0k4JpwoCvdnEiF6hmbBkmCEwQyMxtE, length 32
--- bcrypt(base64(tiger_bin('hashcat'))): $2a$12$mlgJgPwmgWKFZ4g4uh5gIeKv0.57jOrslzSkoqVBkPncaUGrSjH/6
-- ASCII tiger hash (naive):
--- base64(tiger_asc('hashcat')): NmUyZDI0ZTA5YTcwYTAyYmRkOWM0ODg1ZWExOTliMDY0OTgyMTMwNDMyMzMxYjQ0Cg==, length 68
--- bcrypt(base64(tiger_asc('hashcat'))): $2a$12$2PlK6xaUULLPTesfWUAMwOHECXe6IYuxhcSMg12PDHNHdDiMK5ZSq
- ripemd160('hashcat'): 012cb9b334ec1aeb71a9c8ce85586082467f7eb6
-- binary ripemd160 hash:
--- base64(ripemd160_bin('hashcat')): ASy5szTsGutxqcjOhVhggkZ/frY=, length 28
--- bcrypt(base64(ripemd160_bin('hashcat'))): $2a$12$AUuYM1eTWHgoKZD367Ki/Ow9zENvVBn.i9JAj7aUd10IwE8k.wU8u
-- ASCII ripemd160 hash (naive):
--- base64(ripemd160_asc('hashcat')): MDEyY2I5YjMzNGVjMWFlYjcxYTljOGNlODU1ODYwODI0NjdmN2ViNgo=, length 56
--- bcrypt(base64(ripemd160_asc('hashcat'))): $2a$12$Ev5KdwH.Lb9Rhutoz8Hak.R09zN.fhzobu3M0Pf4hHSlGLpURxiXG
- whirlpool('hashcat'): 7ca8eaaaa15eaa4c038b4c47b9313e92da827c06940e69947f85bc0fbef3eb8fd254da220ad9e208b6b28f6bb9be31dd760f1fdb26112d83f87d96b416a4d258
-- binary whirlpool hash:
--- base64(whirlpool_bin('hashcat')): fKjqqqFeqkwDi0xHuTE+ktqCfAaUDmmUf4W8D77z64/SVNoiCtniCLayj2u5vjHddg8f2yYRLYP4fZa0FqTSWA==, length 88
--- bcrypt(base64(whirlpool_bin('hashcat'))): $2a$12$PYelauLHEj3hkUIhpjoCSObGY0GiTVKN0fK2GC2e/QBdjJBNx2XHa
-- ASCII whirlpool hash (naive):
--- base64(whirlpool_asc('hashcat')): N2NhOGVhYWFhMTVlYWE0YzAzOGI0YzQ3YjkzMTNlOTJkYTgyN2MwNjk0MGU2OTk0N2Y4NWJjMGZiZWYzZWI4ZmQyNTRkYTIyMGFkOWUyMDhiNmIyOGY2YmI5YmUzMWRkNzYwZjFmZGIyNjExMmQ4M2Y4N2Q5NmI0MTZhNGQyNTgK, length 172
--- bcrypt(base64(whirlpool_asc('hashcat'))): $2a$12$iBJqJQEwnRqj1vw4bmmmfeLiN3veBNgHgYXOmu2BsU57i3JZMaUcu
Plain: 'test'
- md5('test'): 098f6bcd4621d373cade4e832627b4f6
-- binary md5 hash:
--- base64(md5_bin('test')): CY9rzUYh03PK3k6DJie09g==, length 24
--- bcrypt(base64(md5_bin('test'))): $2a$12$A1msTjiSdBFeIhgHXklWiOaGvmmid3ucnVDV3iClOT5n8WUdxxapW
-- ASCII md5 hash (naive):
--- base64(md5_asc('test')): MDk4ZjZiY2Q0NjIxZDM3M2NhZGU0ZTgzMjYyN2I0ZjYK, length 44
--- bcrypt(base64(md5_asc('test'))): $2a$12$FHaUZmfpp6axttX2Kpzni.D2QGosmpWIgLtezoUDVNefMlaZ1mlEe
- sha1('test'): a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
-- binary sha1 hash:
--- base64(sha1_bin('test')): qUqP5cyxm6YcTAhz05Hph5gvu9M=, length 28
--- bcrypt(base64(sha1_bin('test'))): $2a$12$4ROdtetRds1F1Rw1q0orC.RBQqLWLLSQYpUrP.QKiaXJxc7pDjHHK
-- ASCII sha1 hash (naive):
--- base64(sha1_asc('test')): YTk0YThmZTVjY2IxOWJhNjFjNGMwODczZDM5MWU5ODc5ODJmYmJkMwo=, length 56
--- bcrypt(base64(sha1_asc('test'))): $2a$12$krzwxC4tbbeCDcagAgBuzus00VJ/gkdDoaZeGzjtJHtHGWR7keTTe
- sha224('test'): 90a3ed9e32b2aaf4c61c410eb925426119e1a9dc53d4286ade99a809
-- binary sha224 hash:
--- base64(sha224_bin('test')): kKPtnjKyqvTGHEEOuSVCYRnhqdxT1Chq3pmoCQ==, length 40
--- bcrypt(base64(sha224_bin('test'))): $2a$12$12oXr3l1BjGh5d1v3vEvPOPDrHom7QweW5oPnnOs6vv53N.uWjacm
-- ASCII sha224 hash (naive):
--- base64(sha224_asc('test')): OTBhM2VkOWUzMmIyYWFmNGM2MWM0MTBlYjkyNTQyNjExOWUxYTlkYzUzZDQyODZhZGU5OWE4MDkK, length 76
--- bcrypt(base64(sha224_asc('test'))): $2a$12$I3WdBwEdkJtNw5GSuUX0Dunc63AK2bvToa/KHAf23Jqo7EabHIgjO
- sha256('test'): 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
-- binary sha256 hash:
--- base64(sha256_bin('test')): n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=, length 44
--- bcrypt(base64(sha256_bin('test'))): $2a$12$fS6fpFHxuj3OEtYXP9/08OLcXwBadKMZIg9MAB/qrQ0c9Y6kF8K0W
-- ASCII sha256 hash (naive):
--- base64(sha256_asc('test')): OWY4NmQwODE4ODRjN2Q2NTlhMmZlYWEwYzU1YWQwMTVhM2JmNGYxYjJiMGI4MjJjZDE1ZDZjMTViMGYwMGEwOAo=, length 88
--- bcrypt(base64(sha256_asc('test'))): $2a$12$dp37jBr0aC8AaV2I02zdNe8Wb6xrk6LZWncnLBcm.KnUCGkmvBwka
- sha3-224('test'): 3797bf0afbbfca4a7bbba7602a2b552746876517a7f9b7ce2db0ae7b
-- binary sha3-224 hash:
--- base64(sha3-224_bin('test')): N5e/Cvu/ykp7u6dgKitVJ0aHZRen+bfOLbCuew==, length 40
--- bcrypt(base64(sha3-224_bin('test'))): $2a$12$jmuCURoZ2Q7aVzUQNdkEAuFSeRIuxY8lkTLh2YGXKYD6H1Z8BiS2S
-- ASCII sha3-224 hash (naive):
--- base64(sha3-224_asc('test')): Mzc5N2JmMGFmYmJmY2E0YTdiYmJhNzYwMmEyYjU1Mjc0Njg3NjUxN2E3ZjliN2NlMmRiMGFlN2IK, length 76
--- bcrypt(base64(sha3-224_asc('test'))): $2a$12$8ZDbkiliWCF.zt2l9r8QheuTJA7sfH1L96eiN/wEVAcm3xYrHR0aa
- sha3-256('test'): 36f028580bb02cc8272a9a020f4200e346e276ae664e45ee80745574e2f5ab80
-- binary sha3-256 hash:
--- base64(sha3-256_bin('test')): NvAoWAuwLMgnKpoCD0IA40bidq5mTkXugHRVdOL1q4A=, length 44
--- bcrypt(base64(sha3-256_bin('test'))): $2a$12$93T.uWTACG9YcWqku84vPeOK9adQsD.hMBYu8uieg0d8Cbf9XhoSK
-- ASCII sha3-256 hash (naive):
--- base64(sha3-256_asc('test')): MzZmMDI4NTgwYmIwMmNjODI3MmE5YTAyMGY0MjAwZTM0NmUyNzZhZTY2NGU0NWVlODA3NDU1NzRlMmY1YWI4MAo=, length 88
--- bcrypt(base64(sha3-256_asc('test'))): $2a$12$xP0HYa4cvBpnTZlpDztq0el9XB3dok1pjlGZun/ZM4r2RLP81Uc.G
- tiger('test'): 7ab383fc29d81f8d0d68e87c69bae5f1f18266d730c48b1d
-- binary tiger hash:
--- base64(tiger_bin('test')): erOD/CnYH40NaOh8abrl8fGCZtcwxIsd, length 32
--- bcrypt(base64(tiger_bin('test'))): $2a$12$BHpE0/AYuYMQhxkQgPq5huYvRwC9Z8JOaKmDnnFfl8CQ/lMUU/4VS
-- ASCII tiger hash (naive):
--- base64(tiger_asc('test')): N2FiMzgzZmMyOWQ4MWY4ZDBkNjhlODdjNjliYWU1ZjFmMTgyNjZkNzMwYzQ4YjFkCg==, length 68
--- bcrypt(base64(tiger_asc('test'))): $2a$12$InNzZ9YeOxZ0nSoh08rN1uk0X6lk3StWpCDNluD38HugqBxl.rX2u
- ripemd160('test'): 5e52fee47e6b070565f74372468cdc699de89107
-- binary ripemd160 hash:
--- base64(ripemd160_bin('test')): XlL+5H5rBwVl90NyRozcaZ3okQc=, length 28
--- bcrypt(base64(ripemd160_bin('test'))): $2a$12$khb.fi4t2ZCuAuV.DrvDBexhwapiomFjt9w8DJtYGEMUxrWijDg.W
-- ASCII ripemd160 hash (naive):
--- base64(ripemd160_asc('test')): NWU1MmZlZTQ3ZTZiMDcwNTY1Zjc0MzcyNDY4Y2RjNjk5ZGU4OTEwNwo=, length 56
--- bcrypt(base64(ripemd160_asc('test'))): $2a$12$iHhQY7FX1alBVnnaOTZfEeQUpTVa1qrTg4RPzSSlGm59tzudfRHQa
- whirlpool('test'): b913d5bbb8e461c2c5961cbe0edcdadfd29f068225ceb37da6defcf89849368f8c6c2eb6a4c4ac75775d032a0ecfdfe8550573062b653fe92fc7b8fb3b7be8d6
-- binary whirlpool hash:
--- base64(whirlpool_bin('test')): uRPVu7jkYcLFlhy+Dtza39KfBoIlzrN9pt78+JhJNo+MbC62pMSsdXddAyoOz9/oVQVzBitlP+kvx7j7O3vo1g==, length 88
--- bcrypt(base64(whirlpool_bin('test'))): $2a$12$ecUxpOfxJ86no6woNmoZ6.OMbPnINN.Ni5G3EVpjLkkS805XAVAM6
-- ASCII whirlpool hash (naive):
--- base64(whirlpool_asc('test')): YjkxM2Q1YmJiOGU0NjFjMmM1OTYxY2JlMGVkY2RhZGZkMjlmMDY4MjI1Y2ViMzdkYTZkZWZjZjg5ODQ5MzY4ZjhjNmMyZWI2YTRjNGFjNzU3NzVkMDMyYTBlY2ZkZmU4NTUwNTczMDYyYjY1M2ZlOTJmYzdiOGZiM2I3YmU4ZDYK, length 172
--- bcrypt(base64(whirlpool_asc('test'))): $2a$12$0q1GVTIlalilrjO.4HVeUeAaOVXsw/227HhUXTaT5kl.3TP.l5r3W
Plain: '123456'
- md5('123456'): e10adc3949ba59abbe56e057f20f883e
-- binary md5 hash:
--- base64(md5_bin('123456')): 4QrcOUm6Wau+VuBX8g+IPg==, length 24
--- bcrypt(base64(md5_bin('123456'))): $2a$12$t6BMaS0OFoYcudNcCxYeLOphmT7LOrpr658q18YRhwc7rH.x/SogW
-- ASCII md5 hash (naive):
--- base64(md5_asc('123456')): ZTEwYWRjMzk0OWJhNTlhYmJlNTZlMDU3ZjIwZjg4M2UK, length 44
--- bcrypt(base64(md5_asc('123456'))): $2a$12$ICSlbG8L21Js.AWNjei0H.r68Sm4I.o9zUoksO.dKYWpvihi9sdbG
- sha1('123456'): 7c4a8d09ca3762af61e59520943dc26494f8941b
-- binary sha1 hash:
--- base64(sha1_bin('123456')): fEqNCco3Yq9h5ZUglD3CZJT4lBs=, length 28
--- bcrypt(base64(sha1_bin('123456'))): $2a$12$lE4aE/a3cV0IX9oj1XpAVeW8ufIawZmupjZk80Yw9bmttklQWCIvG
-- ASCII sha1 hash (naive):
--- base64(sha1_asc('123456')): N2M0YThkMDljYTM3NjJhZjYxZTU5NTIwOTQzZGMyNjQ5NGY4OTQxYgo=, length 56
--- bcrypt(base64(sha1_asc('123456'))): $2a$12$X0Z9Ygb8oXFZ6aQ.YvBt7efoNH3Rw66xHs931NaEUXFOd437mF9FW
- sha224('123456'): f8cdb04495ded47615258f9dc6a3f4707fd2405434fefc3cbf4ef4e6
-- binary sha224 hash:
--- base64(sha224_bin('123456')): +M2wRJXe1HYVJY+dxqP0cH/SQFQ0/vw8v0705g==, length 40
--- bcrypt(base64(sha224_bin('123456'))): $2a$12$6ZqgMLtdFXorDxZMcXz4j.6GPARztxzXMRu01XmG34p4jZzlbxxJm
-- ASCII sha224 hash (naive):
--- base64(sha224_asc('123456')): ZjhjZGIwNDQ5NWRlZDQ3NjE1MjU4ZjlkYzZhM2Y0NzA3ZmQyNDA1NDM0ZmVmYzNjYmY0ZWY0ZTYK, length 76
--- bcrypt(base64(sha224_asc('123456'))): $2a$12$NCYs7xolCdKekOqEZW8.Leeno8aY54IePBJjEou8hlhPlYMv2vwxe
- sha256('123456'): 8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92
-- binary sha256 hash:
--- base64(sha256_bin('123456')): jZae727K08KaOmKSgOaGzww/XVqGr/PKEgIMkjrcbJI=, length 44
--- bcrypt(base64(sha256_bin('123456'))): $2a$12$YTbxmjqn85qBtP.7pf522ul8eJYhxZiwlug7rwotrP8VJkzLHhUzS
-- ASCII sha256 hash (naive):
--- base64(sha256_asc('123456')): OGQ5NjllZWY2ZWNhZDNjMjlhM2E2MjkyODBlNjg2Y2YwYzNmNWQ1YTg2YWZmM2NhMTIwMjBjOTIzYWRjNmM5Mgo=, length 88
--- bcrypt(base64(sha256_asc('123456'))): $2a$12$EMK29vasIBqao65f3iUas.Df7nir4uu85K7aTQX1iJ4LSQz3biCWS
- sha3-224('123456'): 6be790258b73da9441099c4cb6aeec1f0c883152dd74e7581b70a648
-- binary sha3-224 hash:
--- base64(sha3-224_bin('123456')): a+eQJYtz2pRBCZxMtq7sHwyIMVLddOdYG3CmSA==, length 40
--- bcrypt(base64(sha3-224_bin('123456'))): $2a$12$LawYUfLJ3W.r/psdad/OBeAoAg5AF13Dp2EoakoQptNjeTCKDejci
-- ASCII sha3-224 hash (naive):
--- base64(sha3-224_asc('123456')): NmJlNzkwMjU4YjczZGE5NDQxMDk5YzRjYjZhZWVjMWYwYzg4MzE1MmRkNzRlNzU4MWI3MGE2NDgK, length 76
--- bcrypt(base64(sha3-224_asc('123456'))): $2a$12$3Vgcx8H7vY1hcUGugwPhJucSMhXoQxWTsLg.AlxFuGKKDCKPsIDXS
- sha3-256('123456'): d7190eb194ff9494625514b6d178c87f99c5973e28c398969d2233f2960a573e
-- binary sha3-256 hash:
--- base64(sha3-256_bin('123456')): 1xkOsZT/lJRiVRS20XjIf5nFlz4ow5iWnSIz8pYKVz4=, length 44
--- bcrypt(base64(sha3-256_bin('123456'))): $2a$12$U9tK2bN35cm15LMPWZiTxu8eMjE.t8XVV7lr288oHbfimvCCv0Rau
-- ASCII sha3-256 hash (naive):
--- base64(sha3-256_asc('123456')): ZDcxOTBlYjE5NGZmOTQ5NDYyNTUxNGI2ZDE3OGM4N2Y5OWM1OTczZTI4YzM5ODk2OWQyMjMzZjI5NjBhNTczZQo=, length 88
--- bcrypt(base64(sha3-256_asc('123456'))): $2a$12$aNqpslJMIYKeSoLnBL5l5.mdBuHL64Kvd7T/3O8Q1Seg3C2CiL.Ba
- tiger('123456'): 5b2715f7cb7488ce2deb8544f0aa91b6f0eec76fb3b74265
-- binary tiger hash:
--- base64(tiger_bin('123456')): WycV98t0iM4t64VE8KqRtvDux2+zt0Jl, length 32
--- bcrypt(base64(tiger_bin('123456'))): $2a$12$LHCRlantZxmNs1GGN5Afj.NF2Vffa0dgaeMGuATkZfF3a0jl2uPPa
-- ASCII tiger hash (naive):
--- base64(tiger_asc('123456')): NWIyNzE1ZjdjYjc0ODhjZTJkZWI4NTQ0ZjBhYTkxYjZmMGVlYzc2ZmIzYjc0MjY1Cg==, length 68
--- bcrypt(base64(tiger_asc('123456'))): $2a$12$u0ap.uNKmktMIJgrbPxNQ.U6.ATjYkeR4S6xthQ7jVCD4SNls6R6u
- ripemd160('123456'): d8913df37b24c97f28f840114d05bd110dbb2e44
-- binary ripemd160 hash:
--- base64(ripemd160_bin('123456')): 2JE983skyX8o+EARTQW9EQ27LkQ=, length 28
--- bcrypt(base64(ripemd160_bin('123456'))): $2a$12$tivsT/Miv1rusD05QhKT/Ouibwkdk184oHT33VZkSNjEIeCR6mb2W
-- ASCII ripemd160 hash (naive):
--- base64(ripemd160_asc('123456')): ZDg5MTNkZjM3YjI0Yzk3ZjI4Zjg0MDExNGQwNWJkMTEwZGJiMmU0NAo=, length 56
--- bcrypt(base64(ripemd160_asc('123456'))): $2a$12$X/Vd/FIXaJnFD9VC/T/wAOnrXxCFCXre7U.bxGgPXV.X88wodiNMO
- whirlpool('123456'): fd9d94340dbd72c11b37ebb0d2a19b4d05e00fd78e4e2ce8923b9ea3a54e900df181cfb112a8a73228d1f3551680e2ad9701a4fcfb248fa7fa77b95180628bb2
-- binary whirlpool hash:
--- base64(whirlpool_bin('123456')): /Z2UNA29csEbN+uw0qGbTQXgD9eOTizokjueo6VOkA3xgc+xEqinMijR81UWgOKtlwGk/Pskj6f6d7lRgGKLsg==, length 88
--- bcrypt(base64(whirlpool_bin('123456'))): $2a$12$UfBBKuTkuND06PHenkbdXOwN91mNjqAcXsbtaj153TIcKPL8rIgI2
-- ASCII whirlpool hash (naive):
--- base64(whirlpool_asc('123456')): ZmQ5ZDk0MzQwZGJkNzJjMTFiMzdlYmIwZDJhMTliNGQwNWUwMGZkNzhlNGUyY2U4OTIzYjllYTNhNTRlOTAwZGYxODFjZmIxMTJhOGE3MzIyOGQxZjM1NTE2ODBlMmFkOTcwMWE0ZmNmYjI0OGZhN2ZhNzdiOTUxODA2MjhiYjIK, length 172
--- bcrypt(base64(whirlpool_asc('123456'))): $2a$12$lHmJz69LIGYWi1t4UsjspeggEUNIgEUxo3rSDJTaYHWRDahCmMeGi
------------------------------------------------------------------------------
Notable examples:
- passlib's 'bcrypt-sha256' format
Reference: https://passlib.readthedocs.io/en/stable/lib/passlib.hash.bcrypt_sha256.html
Example from reference: $bcrypt-sha256$2b,13$Mant9jKTadXYyFh7xp1W5.$J8xpPZR/HxH7f1vRCNUjBI7Ev1al0hu
Its pure bcrypt equivalent is: $2a$13$Mant9jKTadXYyFh7xp1W5.J8xpPZR/HxH7f1vRCNUjBI7Ev1al0hu
... which is bcrypt cost 13 of 'ohImNooBHFR0OVvjcYpJ3NgPQ1qq73WKhHvch0VQtg='
------------------------------------------------------------------------------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment