Enable case insensitive password

[pv_kannan]

Hello,
I am using a method similar to
http://blogs.bartdesmet.net/bart/arc...12/25/515.aspx
to store and retrieve passwords.

Is there a way I can make the passoword comparison case-insensitive? I
noticed that changing the case generated a completely different hash
result.

Thanks in advance,
Kannan

[George]

Lowercase the thing before applying hash function

Helps?

George

<pv*******@yahoo.com> wrote in message news:11**********************@z14g2000cwz.googlegr oups.com...
Hello,
I am using a method similar to
http://blogs.bartdesmet.net/bart/arc...12/25/515.aspx
to store and retrieve passwords.

Is there a way I can make the passoword comparison case-insensitive? I
noticed that changing the case generated a completely different hash
result.

Thanks in advance,
Kannan

[pv_kannan]

True, that would work for new user signups.

The problem is that there are over a thousand users already signed up
for our service.

I converted it to lower case and it generates a completly different
result.

[Lucas Tam]

pv*******@yahoo.com wrote in news:1128628245.639314.83330
@z14g2000cwz.googlegroups.com:

True, that would work for new user signups.

The problem is that there are over a thousand users already signed up
for our service.
Hashes are case sensitive, so to create a case insensitve hash, you'll need
to reset all the passwords : (
I converted it to lower case and it generates a completly different
result.

--
Lucas Tam (RE********@rogers.com)
Please delete "REMOVE" from the e-mail address when replying.

Newmarket Volvo Sucks! http://newmarketvolvo.tripod.com

[George]

I see only one partial solution then
Get 2 hashes one from lower case one from upper case and check both of them.

You will be in a trouble if guy used both Capital and lower case letters.

George.


<pv*******@yahoo.com> wrote in message news:11*********************@z14g2000cwz.googlegro ups.com...
True, that would work for new user signups.

The problem is that there are over a thousand users already signed up
for our service.

I converted it to lower case and it generates a completly different
result.

[Dan]

Check the lower case version, if it fails, check the case as typed, if it
passes, save the lower case hash result in the database. Next login for this
user is case insensitive.

<pv*******@yahoo.com> wrote in message
news:11**********************@z14g2000cwz.googlegr oups.com...

Hello,
I am using a method similar to
http://blogs.bartdesmet.net/bart/arc...12/25/515.aspx
to store and retrieve passwords.

Is there a way I can make the passoword comparison case-insensitive? I
noticed that changing the case generated a completely different hash
result.

Thanks in advance,
Kannan