config/services.yaml

@@ -27,7 +27,7 @@ parameters:
     locales: '%env(APP_LOCALES)%'
     app.supported_locales: ~
 
-    env(PEPPER): ""
+    env(PEPPER): "257d62c24cd352c21b51c26dba678c8ff05011a89022aec106185bf67c69aa8b"
     pepper: '%env(resolve:PEPPER)%'
 services:
     # default configuration for services in *this* file

src/Security/Hasher/PasswordEncoder.php

@@ -47,9 +47,6 @@ class PasswordEncoder implements LegacyPasswordHasherInterface
         $completedPassword = $this->getPasswordToHash($plainPassword, $salt);
 
         foreach ($this->hashAlgoLegacy as $algo) {
-            if ('ssha' === $algo) {
-                return $this->compareSsha($hashedPassword, $completedPassword);
-            }
             if ($this->isObsoleteAlgo($algo)) {
                 if (hash_equals(hash($algo, $completedPassword), $hashedPassword)) {
                     return true;
@@ -101,17 +98,4 @@ class PasswordEncoder implements LegacyPasswordHasherInterface
 
         return $completedPlainPassword;
     }
-
-    protected function compareSsha($hashPassword, $plainPassword)
-    {
-        $base_64_hash_with_salt = substr($hashPassword, 6);
-        $hash_with_salt = base64_decode($base_64_hash_with_salt);
-        $hash = substr($hash_with_salt, 0, 20);
-        $salt = substr($hash_with_salt, 20);
-
-        //  hash given password
-        $hash_given = sha1($plainPassword.$salt, true);
-
-        return $hash == $hash_given;
-    }
 }