New password encoding question

Can I have a bit of info on the new password encoding?

Is MD5 still the default?

Is there a process for switching existing users with MD5 passwords to PBKDF2?

PBKDF2 password storage is the default for new users added in MODX 2.1.

I have published a plugin for converting legacy users with MD5 passwords to PBK2DF2 on successful login. See http://modx.com/extras/package/pbkdf2convert for more information.

Hi,

Don't recall much how I coded that in the past and no longer could find back the old code.
For example: I've the following test password "rememberme", I want to match with the encrypted one in the database with the exact length as "iDxLTbkejeeaQqpPoZTqUCJfWo1ALcBf7gMlYwwMa+Y=" and for any modified password with the salt as "008747a35b77a4c7e55ab7ea8aec3ee0". I'm coding this using java as programming language. Unless I overlook, I only see the password format changed to hashing.modPBKDF2 in the plugin code.

What I recall is the revo uses PBKDF2 with SHA256 as hash but I forgot the number of iterations (1000?) and the correct key size to encrypt so that the hashed password in the database matches with the encrypted one. This is needed to allow members of a modx community to access my multiplayer online texas hold'em game using modx revo authentication so they can play together. Below is the game I like to add support for modx:



Also just out of curiosity, any reason why PBKDF2 was selected? These days I notice that bcrypt is getting popular as encryption. I'm pulling my hair to get the password matched on this one.

Any help is appreciated!

Thanks!

/LR [ed. note: luckyriver last edited this post 9 years, 5 months ago.]

Nvm, got it working after few hours I've posted it. Nice cms, took sometimes to figure out how to add avatar plugin!
This is a tough one to code. Here is what I wanted to achieve:

https://www.youtube.com/watch?v=44loaTCo8a0&feature=youtu.be

Will commit code for whomever wants to install this.

/LR