title: Do you recognize this password hashing format?
body: <p>I'm trying to reverse-engineer a password scheme on a legacy PHP application, so I can port the passwords to a new system which will be replacing it. The application has passwords stored in two formats, a newer and an older one. The newer one simply uses crypt() with salt. The older one doesn't seem to have any supporting code any more (at least not in version control), and no hint of what may have been used. I have one account in the old style for which I may know the password, but I don't know how to check it.</p>
  
  <p>The password is stored in the following format:</p>
  
  <pre><code>$1$f1KtBi.v$nWwBN8CP3igfC3Emo0OB8/
  </code></pre>
  
  <p>It appears to be three fields, delimited by <code>$</code>: <code>1</code>, <code>f1KtBi.v</code>, and <code>nWwBN8CP3igfC3Emo0OB8/</code>. The first field is always <code>1</code>. The second and third fields always match the regular expression <code>[a-zA-Z0-9/.]+</code>. The second field always has 8 characters, the third field always has 22.</p>
  
  <p>Have you seen this password storage scheme before? Any idea what hashing mechanism might have been used?</p>