[RFC] Password Hash Registry
| From: | Sara Golemon | Date: | Tue, 23 Oct 2018 15:03:17 +0000 |
| Subject: | [RFC] Password Hash Registry | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-103375@lists.php.net to get a copy of this message | ||
Moving https://wiki.php.net/rfc/password_registry to
"Under
Discussion" (previously "Draft").
Since originally drafting this proposal, I've changed the algorithm
selector from the current integer set to a more predictable string key
(similar to the hash extension). I think I'll probably extend this
slightly further to overload the function algo parameters such that
they'll accept integer (0-3) as BC for DEFAULT, BCRYPT, ARGON2I, and
ARGON2ID respectively. Please comment if you think that's a bad idea
(or a good one).
-Sara