MySQL - Hash algorithm

Several hashing algorithms have been used in different versions of MySQL for password storage and authentication. However, this page is specifically dedicated to the MySQL323 algorithm, which was used in older versions of the system. Below is an overview of the main hashing methods in MySQL and their characteristics:

• MySQL $A$ (sha256crypt):

  • Uses SHA-256 with salt and multiple rounds to enhance security.
  • Hash length: 64 characters (256 bits / 32 bytes)
  • If your mysql hash is 64 characters, load it as a SHA-256 here. (Don't forget to indicate the salt and the rounds)

  MySQL CRAM (SHA1):

  • Based on SHA-1, without salt, making it vulnerable to dictionary attacks and collisions.
  • Hash length: 40 characters (160 bits / 20 bytes)
  • If your mysql hash is 40 characters, load it as a SHA-1 here.

  MySQL323:

  • A proprietary hashing function with weak security and no salt.
  • Hash length: 16 characters (128 bits / 8 bytes)
  • If your mysql hash is 16 characters, load on this page.

  MySQL 4.1 / MySQL 5 (SHA1 + salt):

  • Uses SHA-1, but improved with a random salt for better security.
  • Hash length: 40 characters (160 bits / 20 bytes)
  • If your mysql hash is 40 characters, load it as a SHA-1 here. (Don't forget to indicate the salt)

The solution is fully DeFi and auditable here