Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:121236
Message-ID: <f4e3ecfb-2868-7523-6099-8fca24b80d38@bastelstu.be>
Date: Thu, 5 Oct 2023 20:14:51 +0200
MIME-Version: 1.0
Content-Language: en-US
To: internals@lists.php.net
References: <a9b0d24f-fe59-75af-4b1e-dcd8067482b0@bastelstu.be>
In-Reply-To: <a9b0d24f-fe59-75af-4b1e-dcd8067482b0@bastelstu.be>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [PHP-DEV] [VOTE] Increasing the default BCrypt cost
From: tim@bastelstu.be (=?UTF-8?Q?Tim_D=c3=bcsterhus?=)

Hi

On 9/21/23 19:26, Tim Düsterhus wrote:
> I just opened the vote for the "Increasing the default BCrypt cost" RFC.
> The RFC contains a two votes, one primary vote that requires a 2/3
> majority to pass and a secondary vote deciding on the new costs with a
> simple majority. Voting runs 2 weeks until 2023-10-05 17:45 UTC.
> 
> Please find the following resources for your references:
> 
> RFC Text: https://wiki.php.net/rfc/bcrypt_cost_2023

The RFC was unanimously accepted with 25 votes. The secondary vote 
decided on a new cost of 12 (14 votes, 53.8%).

The PR for the implementation is here: 
https://github.com/php/php-src/pull/12367

Best regards
Tim Düsterhus