Re: [RFC] Add PASSWORD_BCRYPT_SHA256 to password_hash

From: Date: Tue, 06 Oct 2026 08:13:00 +0000
Subject: Re: [RFC] Add PASSWORD_BCRYPT_SHA256 to password_hash
References: 1 2 3  Groups: php.internals 
Request: Send a blank email to internals+get-132803@lists.php.net to get a copy of this message
On 05/10/2026 16:38, Tim Düsterhus wrote:
rounds and cost are the same thing. The format calls it rounds, but the PHP API calls it cost. Keeping cost on the PHP API makes sense to me for consistency with PASSWORD_BCRYPT, even if it is inconsistent with the hash string. Thank you for the explanation. This inconsistency made me believe there may be several rounds of sha256 too


« previous php.internals (#132803) next »