[php-src] Issue #12911: password_hash()/password_verify() functions should support yescrypt

From: Date: Sat, 09 Dec 2023 08:13:56 +0000
Subject: [php-src] Issue #12911: password_hash()/password_verify() functions should support yescrypt
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-246019@lists.php.net to get a copy of this message
Issue: https://github.com/php/php-src/issues/12911 Author: hannob ### Description Many Linux distributions are moving towards using the yescrypt hash function as a modern hash function for system authentication (it's the default in latest versions of Fedora, Debian, Ubuntu). PHP's password_hash()/password_verify() functions currently do not support yescrypt. It can be used with crypt() when php is compiled with --with-external-libcrypt which is currently not the default. However, the semantics of crypt() are complicated, and the docs for the crypt() function encourage the use of password_hash(). Therefore, it'd be good if password_hash() would support yescrypt.

« previous php.bugs (#246019) next »