Re: [PATCH] crypt_blowfish 1.2

On Sun, Jul 17, 2011 at 10:26:16PM +0400, Solar Designer wrote: > + * For actual implementation, we set an array index in the variable "bug" > + * (0 means no bug, 1 means sign extension bug emulation) and a flag in the > + * variable "safety" (bit 16 is set when the safety measure is requested). > + * Valid combinations of settings are: > + * > + * Prefix "$2a$": bug = 0, safety = 0x10000 > + * Prefix "$2x$": bug = 1, safety = 0 > + * Prefix "$2y$": bug = 0, safety = 0 If I'm understanding the change correctly, we should now be advising users to transition their code to '$2y$' rather than '$2a$', with perhaps a note mentioning the '$2x$' prefix for "transitioning users with passwords that contain non-ASCII characters with the 8th bit set". Obviously, any documentation change in this regard will need to be pending on the version these patches get rolled into...