Merge branch 'fix_crypt_password' into 'master'

fix crypt password verification function See merge request federez/re2o!419
7 years ago · 3db44f592a
1 changed files with 1 additions and 1 deletions
--- a/re2o/login.py
+++ b/re2o/login.py
@ -115,7 +115,7 @@ class CryptPasswordHasher(hashers.BasePasswordHasher):
        """
        assert encoded.startswith(self.algorithm)
        salt = hash_password_salt(encoded)
-        return constant_time_compare(crypt.crypt(password, salt),
+        return constant_time_compare(self.algorithm + crypt.crypt(password, salt),
                                     encoded)
    def safe_summary(self, encoded):