Re: [PROPOSED] password_hash RFC - Implementing simplified password hashing functions

Hi! > https://wiki.php.net/rfc/password_hash Looks good. The only question I have is for password_make_salt() - do we need the user to specify length? I think length is defined by the algorithm in the most cases. Maybe convert it to password_make_salt(int $salt_type = PASSWORD_SALT_BCRYPT, int $length) with both arguments optional and one of salt types being PASSWORD_SALT_OTHER which just generates given length? -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227