Unable to migrate Hashed (MD5 phpBB3) password to Firebase

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Anti-Spam Guide
Post Reply
eraniljamwal
Registered User
Posts: 2
Joined: Sat Jun 09, 2018 3:25 pm

Unable to migrate Hashed (MD5 phpBB3) password to Firebase

Post by eraniljamwal » Sat Jun 09, 2018 4:02 pm

I am not sure this is the right place to discuss about PhpBB passwords migration but I want quick help regarding this. I used following commands for HMAC_MD5 & MD5 import on Firebase CLI & its successful for password "mypass":

MD5 command:
firebase auth:import C:/Users/username/fb.json --hash-algo=MD5 --rounds=0

HMAC_MD5 command:
firebase auth:import C:/Users/username/fb.json --hash-algo=HMAC_MD5 --hash-key=aGVscG1lcGxlYXNl

Above commands are successfully imported & I can able to login Firebase also. Unfortunately these commands are not working when we are using md5 hashed password created by phpBB.
Firebase import is successful but unable to login with actual password.

Phpbb Password Details:

- User Password : mypass
- Secret Key : wwS4f20N
- Hashed Password : $H$9wwS4f20NH3ROzWtKHhV2hZfJ6BbIC/
- Base64 Secret key : d3dTNGYyME4=
- Base64 Hashed Password : JEgkOXd3UzRmMjBOSDNST3pXdEtIaFYyaFpmSjZCYklDLw==

JSON file (FB.json):

Code: Select all

    "users": [
    {
      "localId": "7ecfc5d7-6aed-11e8-84e4-000d3a3056d1",
      "email": "test_email@test.org",
      "emailVerified": false,
      "passwordHash": "JEgkOXd3UzRmMjBOSDNST3pXdEtIaFYyaFpmSjZCYklDLw==",
      "displayName": "Test User",
      "createdAt": 1486324027000,
      "lastSignedInAt": 1486324027000
    }]
MD5 command for phpbb Hashed password:
firebase auth:import C:/Users/username/fb.json --hash-algo=MD5 --rounds=0

HMAC_MD5 command for phpbb Hashed password:
firebase auth:import C:/Users/username/fb.json --hash-algo=HMAC_MD5 --hash-key=d3dTNGYyME4=

I don't understand what parameters or setting I am missing. Is there any different setting for MD5 phpBB3 hash password migration?

User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10286
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: Unable to migrate Hashed (MD5 phpBB3) password to Firebase

Post by Noxwizard » Sat Jun 09, 2018 5:18 pm

phpBB3 doesn't use MD5 hashes, only phpBB2 did. 3.0.x used phpass password hashing, which is what the $H$ at the beginning of the hash indicates. In 3.1.x, we moved to bcrypt hashes.
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.

eraniljamwal
Registered User
Posts: 2
Joined: Sat Jun 09, 2018 3:25 pm

Re: Unable to migrate Hashed (MD5 phpBB3) password to Firebase

Post by eraniljamwal » Sun Jun 10, 2018 1:46 pm

Noxwizard wrote:
Sat Jun 09, 2018 5:18 pm
phpBB3 doesn't use MD5 hashes, only phpBB2 did. 3.0.x used phpass password hashing, which is what the $H$ at the beginning of the hash indicates. In 3.1.x, we moved to bcrypt hashes.
Thanks Patrick,
As php 3.0.x using phpass password hashing & Firebase supports following hash-algo.
BCRYPT, SCRYPT, STANDARD_SCRYPT, HMAC_SHA512, HMAC_SHA256, HMAC_SHA1, HMAC_MD5, MD5, SHA512, SHA256, SHA1, PBKDF_SHA1, PBKDF2_SHA256.

I have created following hashed password using phpass:
User Password: Test 123
Phpass Hashed Password: $H$5ZDzPE45CCztuSXJ8e5SqkX0YkAWAl.
Phpass : $H$
Salt: 5ZDzPE45C
Rounds: 5
Hash: CztuSXJ8e5SqkX0YkAWAl.

I am not sure which hash-algo I will use for Firebase import and please let me know if my understanding is correct for hash password breakdown.
Last edited by eraniljamwal on Mon Jun 11, 2018 3:43 am, edited 1 time in total.

User avatar
bonelifer
Community Team Member
Community Team Member
Posts: 3368
Joined: Wed Oct 27, 2004 11:35 pm
Name: William
Contact:

Re: Unable to migrate Hashed (MD5 phpBB3) password to Firebase

Post by bonelifer » Sun Jun 10, 2018 4:15 pm

It should be pointed out that phpBB 3.0.x is no longer supported as it has reached End of Life status many years ago. 3.1 or even better(ie EOL isn't that far off for 3.1) 3.2 should be your starting point.
Knowledge Base | phpBB Board Rules | Search Customisation Database
Image
Please don't contact me via PM or email for phpBB support .

Post Reply

Return to “phpBB Discussion”

Who is online

Users browsing this forum: KevC and 22 guests