Re: [RFC][Discussion] Add PASSWORD_BCRYPT_WRAP
| From: | Andrey Andreev | Date: | Mon, 02 Nov 2026 15:29:22 +0000 |
| Subject: | Re: [RFC][Discussion] Add PASSWORD_BCRYPT_WRAP | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-132989@lists.php.net to get a copy of this message | ||
Hi,
Thank you all for the feedback (on and off-list). I've updated the RFC and
attempted to thoroughly address all of it, and also have a question:
For further disambiguation, would it help if prehash=sha512 was changed to
prehash=hmacsha512 ? I'm increasingly leaning towards it.
On Sun, Nov 1, 2026 at 1:20 PM Sjoerd Langkemper <sjoerd-php@linuxonly.nl>
wrote:
>
> It is unfortunate that we now have two RFCs that are so similar. Voting on
> them in isolation could result in an undesirable outcome.
>
I'd say that there's a significant difference, but I'm not particularly
happy about making it a contest either. I was already working on
bcrypt-wrap as the bcrypt-sha256 suggestion appeared first on list and then
as RFC within a few days.
It just turned out this way, hopefully we don't have to look at it as mine
against yours.
Cheers,
Andrey.