Special character in Username produces different results
I've read similar issues (german umlauts) which are closed but the issue still persists.
Today I discovered that using special characters ('ß') in the user name on different devices will produce different results.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Maarten Billemo... on 22 Jan, 2015 06:13 PM
The correct results are currently produced by the C command-line program and Java desktop client. The iPhone and Mac apps are being updated.
2 Posted by Chris on 24 Jan, 2015 09:21 AM
Sorry for asking again, but does that mean the old Java and the current iPhone and Mac releases produced wrong results even though they generated all the same passwords?
Support Staff 3 Posted by Maarten Billemo... on 24 Jan, 2015 02:37 PM
That is correct. Specifically, they created wrong passwords for names that contain multi-byte characters. The problem is related to a security property in the algorithm that wasn't respected in the way the passwords were generated. The fix is necessary to ensure the security of the passwords is maximal.
The flaw isn't anything serious today, but if in the future a flaw is found against the SHA256 algorithm, this particular security property could become an important defence against such a flaw.