Re: For discussion (no RFC for now) - more libcrypt bindings
| From: | Ayesh Karunaratne | Date: | Fri, 13 Sep 2024 07:57:54 +0000 |
| Subject: | Re: For discussion (no RFC for now) - more libcrypt bindings | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-125527@lists.php.net to get a copy of this message | ||
> This proposal provides more bindings:
>
> * crypt_gensalt($salt, $count)
> * crypt_preferred_method()
> * crypt_checksalt($salt)
>
> And more Algo
>
> * scrypt
> * yescrypt
> * gost-yescrypt
>
Assuming the intended use case is compatibility with
/etc/shadow or
something similar, would it not make sense to add these algos to
password_hash function, and not add new functions?
I'm probably missing some valid use cases for having separate
functions to have separate functions for gen/check salt, so please
disregard this comment if that's the case :)