Re: todo: crypt_blowfish issue
| From: | David Zülke | Date: | Tue, 28 Jun 2011 10:19:56 +0000 |
| Subject: | Re: todo: crypt_blowfish issue | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-53607@lists.php.net to get a copy of this message | ||
On 27.06.2011, at 01:55, Stas Malyshev wrote:
> However, it still has a chance somebody's data won't work after the update if he had
> 8-bit data hashed with old crypt(). He would need either to re-hash or to change prefix from $2a to
> $2x.
IMO that's a fair trade-off; people could even implement this in their app code by replacing
"$2a" with "$2x" for a transitional period in the hash if the comparison fails
(and then simply re-hash the password again with $2a so it's secure). I'm volunteering to
write the necessary code sample for the upgrading notes :p
David
Attachment: [application/pkcs7-signature] smime.p7s
Attachment: [application/pkcs7-signature] smime.p7s