For discussion (no RFC for now) - more libcrypt bindings
| From: | Remi Collet | Date: | Fri, 13 Sep 2024 07:32:16 +0000 |
| Subject: | For discussion (no RFC for now) - more libcrypt bindings | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-125526@lists.php.net to get a copy of this message | ||
Hi,
Using "crypt" function is a mess
(perhaps one of the reason for password_hash)
This proposal provides more bindings:
* crypt_gensalt($salt, $count)
* crypt_preferred_method()
* crypt_checksalt($salt)
And more Algo
* scrypt
* yescrypt
* gost-yescrypt
These were already usable but very hard to use without a salt.
Small breaking change
CRYPT_* constants are now string with algo prefix
See https://github.com/php/php-src/pull/15870
A single test for now, showing usage and checking
compatibility with password_hash
Open for discussion
Remi