php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #71177 add sha512/224 and sha512/256
Submitted: 2015-12-21 00:45 UTC Modified: 2016-05-14 04:40 UTC
From: zelnaga at gmail dot com Assigned: pollita (profile)
Status: Closed Package: hash related
PHP Version: 7.0.1 OS: Ubuntu
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: zelnaga at gmail dot com
New email:
PHP Version: OS:

 

 [2015-12-21 00:45 UTC] zelnaga at gmail dot com 
Description:
------------
According to http://php.net/manual/en/function.hash-algos.php sha512/224 and sha512/256 are not supported algorithms. They were initially defined FIPS 180-4 in March 2012:

https://www.federalregister.gov/articles/2012/03/06/2012-5400/announcing-approval-of-federal-information-processing-standard-fips-publication-180-4-secure-hash

sha224 and sha256 utilize 32-bit integers and process messages in 512-bit chunks.

sha384, sha512, sha512/224 and sha512/256 utilize 64-bit integers and process messages in 1024-bit chunks. The only difference between these four algorithms is that they have different initial values for the hash.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-12-21 01:00 UTC] zelnaga at gmail dot com 
Also, see http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf#page=35
 [2015-12-21 04:52 UTC] pajoye@php.net
-Status: Open +Status: Not a bug
 [2015-12-21 04:52 UTC] pajoye@php.net 
They are, see

http://php.net/manual/en/function.hash-algos.php
    [4] => sha224
    [5] => sha256
    [6] => sha384
    [7] => sha512
 [2015-12-21 08:33 UTC] leigh@php.net
-Status: Not a bug +Status: Re-Opened
 [2015-12-21 08:33 UTC] leigh@php.net 
@Pierre SHA-512/224 and SHA-512/256 are not the same as SHA-224 and SHA-256, so this is still a valid FR.
 [2016-05-14 04:06 UTC] pollita@php.net
-Assigned To: +Assigned To: pollita
 [2016-05-14 04:40 UTC] pollita@php.net
-Status: Re-Opened +Status: Closed
 [2016-05-14 04:40 UTC] pollita@php.net 
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

https://github.com/php/php-src/commit/49a7be069700efbb98dbb076bb0891c748c343f4
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sun Dec 22 11:01:30 2024 UTC