hash algorithm different

[Felipe]

Hello. I have looked for the following "problem" but I didn't find any posts that describe it.

I installed the fx extension and attempted to verify that the PWM.org website would produce the exact same password, in case I was ever away from my computer but needed to log in to a site setup with a PWM password. I discovered that the firefox extension had a different hash algorithm as default than the PWM.org website. The extension has a default hash algorithm of MD5; the website is set to MD4. Those of us that aren't computer savvy might run into problems and not be able to login to their favourite websites when they are away from their fx extension.

The default values for the firefox extension should match those of the website (MD4).

-Felipe

[Eric H. Jung]

Hi Felipe,

Very true. Thanks for pointing that out. I will make the changes. The defaults should be upgraded to SHA-256, anyway...

[tanstaafl]

Is SHA-256 better than HMAC-SHA-256?

[Eric H. Jung]

Not in the context of PasswordMaker; they are the same.