#18 0.9.3, 0.9.4 - something broken


I was using gringotts for encoding some texts - see

Starting from 0.9.3 (so applies to 0.9.4, too) I wasn'
t able to read crypted notes using gringotts - the
password was supposed to be wrong. Downgrading mhash to
0.9.2 and password was again correct.

So, how to repeat
- install mhash 0.9.2
- install gringotts
- create new encrypted file using gringotts
- upgrade mhash to 0.9.4
- try to reopen previously encrypted file

It will say that the password is wrong. Tested on Linux
/ppc and Linux/amd64.

My options in gringotts were:
- serphent
- ripmed 160
- zlib
- best


  • arekm

    arekm - 2006-03-18

    Logged In: YES

    Issue still there in 0.9.6.

  • Nobody/Anonymous

    Logged In: NO

    Issue still there in 0.9.7.

  • Jonathan Day

    Jonathan Day - 2007-02-23

    Logged In: YES
    Originator: NO

    There were some internal changes to mhash which should no longer be visible to external applications. If someone could validate Gringotts with mhash on the PPC and AMD64, that would be great.

  • arekm

    arekm - 2007-02-23

    Logged In: YES
    Originator: YES

    Not that this issue is not architecture related. Right now I'm using i686 linux and it's visible.

    Unfortunately the problem still exists. Something has changed in mhash behaviour. gringotts encrypted file with gringotts using mhash 0.9.2 is not readable (program reports wrong password) after upgrading to Downgrading mhash back to 0.9.2 makes encrypted file readable again.


Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

No, thanks