Why does phpass return different hashes for the same input string?

Question

I'm used to having hashing algorythms return always the same hash.

Why does phpass library return always different hashes?

Does it have something to do with the IV? (I never fully understood that concept)

<?php

require __DIR__ . '/PasswordHash.php';

$hasher = new PasswordHash(11,false);

$password = 'bla123';

echo $hash = $hasher->hashPassword($password); // different for each request

please provide us some code you using – Oct 20 '11 at 13:20 — , Oct 20 '11 at 13:20

score 0 · Answer 1 · answered Oct 20 '11 at 13:46

0

according to this section "What if the user already exists?" it's normal behaviour of this library

answered Oct 20 '11 at 13:46

score 0 · Accepted Answer · answered Oct 20 '11 at 19:04

0

It uses crypt(), which already generates different hashes for the same string. It hashes each password with a different key, and it stores the key inside the hash (it's public).

answered Oct 20 '11 at 19:04

HappyDeveloper

12,480
22
82
117

Why does phpass return different hashes for the same input string?

2 Answers2