Doc #64816 [NEW]: CRYPT_BLOWFISH is not better than PBKDF2

From: nenolod at dereferenced dot org Operating system: N/A PHP version: 5.5.0RC1 Package: Documentation problem Bug Type: Documentation Problem Bug description:CRYPT_BLOWFISH is not better than PBKDF2 Description: ------------ --- From manual page: http://www.php.net/function.hash-pbkdf2#refsect1-function.hash-pbkdf2-notes --- CRYPT_BLOWFISH has a limit of 76 characters maximum. PBKDF2 has no limit, and when used with an HMAC function like sha256 or sha512 is vastly more complex to crack. Please consider removing this from the documentation as it recommends a poor security practise as 'superior'. -- Edit bug report at https://bugs.php.net/bug.php?id=64816&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=64816&r=trysnapshot54 Try a snapshot (PHP 5.3): https://bugs.php.net/fix.php?id=64816&r=trysnapshot53 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=64816&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=64816&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=64816&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=64816&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=64816&r=needscript Try newer version: https://bugs.php.net/fix.php?id=64816&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=64816&r=support Expected behavior: https://bugs.php.net/fix.php?id=64816&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=64816&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=64816&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=64816&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=64816&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=64816&r=dst IIS Stability: https://bugs.php.net/fix.php?id=64816&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=64816&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=64816&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=64816&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=64816&r=mysqlcfg