Re: Adding a simple API for secure password hashing?
| From: | Pierre Joye | Date: | Sun, 17 Jun 2012 21:54:53 +0000 |
| Subject: | Re: Adding a simple API for secure password hashing? | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-60873@lists.php.net to get a copy of this message | ||
hi,
On Sun, Jun 17, 2012 at 3:58 PM, Alexey Zakhlestin <indeyets@gmail.com> wrote:
> I guess SCrypt binding could be implemented.
> http://www.tarsnap.com/scrypt.html
Using yet another dependency for that? Not good.
> That's the best available option at the moment.
>
> http://stackoverflow.com/questions/1226513/whats-the-advantage-of-scrypt-over-bcrypt
This post says the exact opposite, just saying :)
> It is BSD-licensed, so we can easily bundle it with PHP
Maybe nice to have in pecl.'
cheers,
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org