note 109781 added to function.hash-pbkdf2

I don't understand the purpose of the following warning on the man page: "Caution: The PBKDF2 method can be used for hashing passwords for storage (it is NIST approved for that use). However, it should be noted that CRYPT_BLOWFISH is better suited for password storage and should be used instead via crypt()." As you state PBKDF2 is NIST approved for that usage, BLOWFISH is not. From what I've read, that CRYPT_BLOWFISH is not the same as bcrypt but even if it was, warning someone to use it instead of PBKDF2 is wrong. I would accept it as a security professional's opinion in a comment of this page, not stated like that in a man page on behalf of the php developers community. ---- Server IP: 194.8.30.16 Probable Submitter: 194.65.5.235 ---- Manual Page -- http://www.php.net/manual/en/function.hash-pbkdf2.php Edit -- https://master.php.net/note/edit/109781 Del: integrated -- https://master.php.net/note/delete/109781/integrated Del: useless -- https://master.php.net/note/delete/109781/useless Del: bad code -- https://master.php.net/note/delete/109781/bad+code Del: spam -- https://master.php.net/note/delete/109781/spam Del: non-english -- https://master.php.net/note/delete/109781/non-english Del: in docs -- https://master.php.net/note/delete/109781/in+docs Del: other reasons-- https://master.php.net/note/delete/109781 Reject -- https://master.php.net/note/reject/109781 Search -- https://master.php.net/manage/user-notes.php