id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
17777	MD5PasswordHasher is not using salt	gunnar@…	Paul McMillan	"Django 1.3.1:
In django.contrib.auth.models.py line 32 md5 passwort hash is calculated with salt.
{{{
 return md5_constructor(salt + raw_password).hexdigest()
}}}

Django 1.4 beta 1 uses md5 without salt:

{{{
 return hashlib.md5(password).hexdigest()
}}}

Verification of passwords from users of Django 1.3.1 with md5 password with salt is failing.
Therefore this users can't login anymore.

"	Bug	closed	contrib.auth	1.4-beta-1	Release blocker	fixed	MD5PasswordHasher  MD5 salt login	mbt@…	Accepted	0	0	0	0	0	0