I am trying to figure out what is the security that Drupal 6/7 uses by default to store passwords. Is it MD5, AES, SHA? I have been unable to find anything.
drupal 8 is using Phpass (modified version)
drupal 7 use SHA-512 + salt
drupal 6 and previous version were using md5 with no salt