Re: [DRAFT RFC] Adding Simplified Password Hashing API
| From: | Christopher Jones | Date: | Mon, 02 Jul 2012 19:59:05 +0000 |
| Subject: | Re: [DRAFT RFC] Adding Simplified Password Hashing API | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-61070@lists.php.net to get a copy of this message | ||
On 06/26/2012 08:25 AM, Anthony Ferrara wrote:
Hello All, I've taken the conversation of the previous simplified password hashing API, and generated a patch and draft RFC for it. The patch isn't ready yet (needs review, cleanup and testing), but it's a start. https://wiki.php.net/rfc/password_hash Please have a look and comment away! Thanks, AnthonyHi Anthony, I think PASSWORD_BCRYPT should be an ordinal value, which the new library maps to "2y" when bcrypt is called. The API of password_make_salt() seems restrictive. What if other options are needed in future? Chris -- christopher.jones@oracle.com http://twitter.com/#!/ghrd