[php-src] Issue #12911: password_hash()/password_verify() functions should support yescrypt
| From: | hannob | Date: | Sat, 09 Dec 2023 08:13:56 +0000 |
| Subject: | [php-src] Issue #12911: password_hash()/password_verify() functions should support yescrypt | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-246019@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/12911
Author: hannob
### Description
Many Linux distributions are moving towards using the yescrypt hash function as a modern hash
function for system authentication (it's the default in latest versions of Fedora, Debian,
Ubuntu).
PHP's password_hash()/password_verify() functions currently do not support yescrypt. It can be
used with crypt() when php is compiled with --with-external-libcrypt which is currently not the
default. However, the semantics of crypt() are complicated, and the docs for the crypt() function
encourage the use of password_hash(). Therefore, it'd be good if password_hash() would support
yescrypt.