Listed below are the SHA256 hashes of the empty string generated by the PHP cryptography function.
$5$fooooooooooooooo$Y6IVN.cYkABQ4h8dCR0zL/rJoRx09pwMoGaYST9HqDD
$5$baaaaaaaaaaaaaar$C84IKQdPMG8qvnnckGZsyBJWKHuaSD0tqcmyueHI0GA
Each of them was generated with the other 16 bytes of salt present in the hash. Is there a way to simply verify that they are hashes of the same thing, without knowing what this thing is?
source
share