Disabling password salting

[ThomasE]

Hey people,

I'm fairly new to work with encryptions and so, I have managed to create a working register system encrypted with SHA1, where I also am able to log in to the account on the website - until I have logged in ingame, for the first time. MapleStory is creating a salt for the password.

I thought that the simpliest way to solve this is probably to somehow disable the function that creates a salt for the password, and make MapleStory use SHA1 without salt instead.

Now, I would need direction to where I should look in the source (GMS v62) to be able to continue. I have found LoginCrypto.java, but I can't seem to understand where these functions are being executed from. Would be appreciated if anyone could help me further with this!

Thanks in advance!

[MentaL]

[ThomasE]

Bump!

[Fraysa]

Simply remove everything that has to do with it (mostly loading/saving). When you receive the login packet, encrypt the received password using SHA1 and compare it to the one you loaded from the database. If they match, it's a success. I don't suggest removing salt, it provides another "wall" of security, your choice though.

[namazi]

I recommend you to rewrite the login() routine in src\client\MapleClient.java .
SALT is not used with the check by SHA1.

                        boolean updatePasswordHash = false;
                        if (LoginCryptoLegacy.isLegacyPassword(passhash) && LoginCryptoLegacy.checkPassword(pwd, passhash)) {
                            loginok = 0;
                            updatePasswordHash = true;
                        } else if (salt == null && LoginCrypto.checkSha1Hash(passhash, pwd)) {
                            loginok = 0;
                            updatePasswordHash = false;  // true => false
                        } else if (LoginCrypto.checkSaltedSha512Hash(passhash, pwd, salt)) {
                            loginok = 0;
                        } else {
                            loggedIn = false;
                            loginok = 4;
                        }