DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

Move SHA256 instead of SHA1 for the validation hash

 3 Replies
 2 Subscribed to this topic
 34 Subscribed to this forum
Sort:
Author
Messages
New Around Here
Posts: 12
New Around Here

Is it possible to move SHA256 instead of SHA1 for the validation hash in DNN 09.10.01(0)?
If Yes, please explain the complete steps.

Senior Member
Posts: 1608
Senior Member
MVP
MVP
You're an MVP!
New Poster
New Poster
Congrats on posting!
Before you do anything, you should first upgrade DNN to at least the latest 9.13.xx version.
New Around Here
Posts: 12
New Around Here

Form submission is not working after migrating SHA1 to SHA256. How to solve it?

Veteran Member
Posts: 354
Veteran Member
3 Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
MVP
MVP
You're an MVP!
2 Engaged Reader
Engaged Reader
You are an engaged reader!
Avid Reader
Avid Reader
Avid Reader art thou!

Hashing is a on-way encryption. Let's take the example of a password for instance, the user types a password to be store and the system stores a very long "signature" of that password. The system can't know the password from that signature represents. But every time the user types that password, it produces that same very long signature.

Changing the hash algorythm means that that the way to generate that signature changes. Which means that the value store no longer represents that original string and since the system can't decrypt it, there is no automated way to migrate it.

In this specific case, the only way to get back to a working state would be to force all users to reset their password (there is no built-in way to do that in DNN at the moment) but I have known people to use the Newsletter module with a token to do such things.

However any 3rd party module can also use that algorithm which would have unkown effects (I am not sure what you mean by "form submissions" here.

Long story short, although migrating from SHA-1 to SHA-256 is technically a security improvement, considering DNN also uses a salt, the improvement it provides is very very small. See https://docs.dnncommunity...rom-sha-1-to-sha-256|

So unless you HAVE to migrate (required by some compliance regulations, etc.), I would just restore a backup.

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved