For discussion (no RFC for now) - more libcrypt bindings

From: Date: Fri, 13 Sep 2024 07:32:16 +0000
Subject: For discussion (no RFC for now) - more libcrypt bindings
Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
Hi,

Using "crypt" function is a mess

(perhaps one of the reason for password_hash)

This proposal provides more bindings:

* crypt_gensalt($salt, $count)
* crypt_preferred_method()
* crypt_checksalt($salt)

And more Algo

* scrypt
* yescrypt
* gost-yescrypt

These were already usable but very hard to use without a salt.

Small breaking change

CRYPT_* constants are now string with algo prefix


See https://github.com/php/php-src/pull/15870

A single test for now, showing usage and checking
compatibility with password_hash


Open for discussion


Remi


Thread (5 messages)

« previous php.internals (#125526) next »