Password Encryption

Hi multimedia_nj,

You can find CMSB's password hashing function in /lib/login_functions.php in getPasswordDigest() and _getPasswordSalt().

It's basically sha1() with a prefix of '$sha1$' added along with a salt of 'd7w8e' to prevent precomputed dictionary attacks. See: http://en.wikipedia.org/wiki/Salt_(cryptography)

Here's some code to generate a CMSB encrypted password from a plaintext password:

$plaintext = "supernova"; // plaintext password
$encrypted = '$sha1$' . sha1($plaintext . 'd7w8e');
print $encrypted; // prints $sha1$2a8fa94af0fb5126d0c791160aa11835b5b251d3

Hope that helps, let me know if you have any other questions.