note 112709 deleted from function.password-hash by nikic
| From: | nikic@php.net | Date: | Mon, 26 Aug 2013 12:40:33 +0000 |
| Subject: | note 112709 deleted from function.password-hash by nikic | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-196081@lists.php.net to get a copy of this message | ||
Note Submitter: benjamin dot morel at gmail dot com
----
The comment by nickshanks is totally uninformed, you can trust the documentation that explicitly
says that the length will always be 60 chars. The cost is exponential, and its current range (as per
crypt() documentation) is 04-31. Reaching 100 would require our computers to be
590295810358705651712 times faster. Reaching 1000 would require our computers to be 5e291 times
faster (that's 5 followed by 291 zeros).