Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:125526 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id 4AE281A00BD for ; Fri, 13 Sep 2024 07:32:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1726212863; bh=WnQdI1jWuW1l8VFdNds/WxTItSp7ukxTQhXIHRkurdw=; h=Date:To:From:Subject:From; b=EDaxQxxDaJNctUC6ItfXhlhZp+Fq8Laiw5bP42lNr9dvmClxUlYMy1+4aEeLStGUD xtnGpoePItBmZtbCQlcu5n/VdO2vjMTSEvOpMdriHwTbRheaA1RjXhHP49H7XcLxn+ IPKPLJgPSD08z+pcvxIiSkcQEog4thZnSfZEzHZCz+jK29Vtq4j9QHtOjd2fMxps7u sa5MuCu+pXwBlRwm/c3nSC4XS9kpLWd7WLN0b2ZjloFJMLSegtbaHZmpz87pdDcNBh GayKJRApthUnO3lgZXTOPM2fdjCUQ8J2vB7iMQkmqCweTvde/96dFVEj7YrlYEiWJW 2yIhvfKSSCTgg== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 81B5C180054 for ; Fri, 13 Sep 2024 07:34:21 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DMARC_MISSING,HEADER_FROM_DIFFERENT_DOMAINS, RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS, SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from relay6-d.mail.gandi.net (relay6-d.mail.gandi.net [217.70.183.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Fri, 13 Sep 2024 07:34:20 +0000 (UTC) Received: by mail.gandi.net (Postfix) with ESMTPSA id 72583C0003 for ; Fri, 13 Sep 2024 07:32:16 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famillecollet.com; s=gm1; t=1726212736; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:autocrypt:autocrypt; bh=WnQdI1jWuW1l8VFdNds/WxTItSp7ukxTQhXIHRkurdw=; b=pGdf69t8DNXsblEPcytPWYZTmSQKrnjJ7wujMMj5I1hGoGrmKGq0csZVbyexdBITCgE5Vq DovZ5BPQ9OTtDXNXNXVxH4bdUjeeNOLCNUUiddxxXm1ylBl+Qvph5XS8Ks08IU/oC1eFSw 7dzGyfhOyoMl7tPMAnOBE3Au2rovyqCpcKkSLkJUzLB2M1k++2OCaatGKFChmoPSuBgJK5 +9NtK3rdpBvS95Ucel13Ji8dZUp/gWbASlD2Z4zeJR8UFxjrhqZbLrpBGTUBg80MiWOvH5 uKD7tb5nEdMDw98JKwhaQRZFyUY48Kb2WmNJzfkIAF/+tVJMIJBLZCh5EdphJw== Message-ID: <1560103a-e2b0-46b2-9089-81bcfb715352@FamilleCollet.com> Date: Fri, 13 Sep 2024 09:32:16 +0200 Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: PHP internals Content-Language: en-US Subject: [PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings Autocrypt: addr=Remi@FamilleCollet.com; keydata= xsDiBERzWqQRBADCfPUQP2A61aPG+qaMgBUviqbT9LVE4GBXzrPXy6xorb3hXZxLuqfqAJeE jeO7Qdrz4PCfA5GTYvM5wrbu7SiRB4Zb8c1z02J+XAvPvMb+Y2PyrI39feJmVP6XFvwYVhnC crA+YH4m5boJtXCGHgOOafcrKFOGn++y08+xdGmAjwCg+wW25B+zSoY2ycOeSqKQE6gvOPcD /2iYedDC37aMOFJVrzaMyRDr0CULgyhyXfCWbmzfTS9irtA+P7nZUscPiVj8n4aWvQXhxdjE 6BdSGuAsH+/DzSALGlkc0Ipo4QB8VMRzVAERN5j5nU0rDMsghpFmny2zVfvu9Mg6rE8fnkOp RkJJc0/Ocs/Ld12AM22vy/bwJvkWBACsgIqdBPBH74656nYl9Wpls8HjyTJhe3N5F0y2/QJh dJxWrSKBJKrM21gSzeg52YpTO4Gb0ZOZNoOK0rAXU0vJc7Vjcg6p/kzmfpBCSCiWz7Kv+slA lNrQAvKoA+tcNo8kFs40u+eu9rvr011U1v8cvQzEiIOkiTpbSE12xQn5IM0kUmVtaSBDb2xs ZXQgPFJlbWlARmFtaWxsZUNvbGxldC5jb20+wmMEExECACMCGwMGCwkIBwMCBBUCCAMEFgID AQIeAQIXgAUCR8P6CQIZAQAKCRBhSmkFKfFqGIuAAJ9PJANQZSuNmkn1fRyGQlu5aIfVVQCf aNpfCm/WJr2KUhW8mPfiaoTkJUvOwU0ERHNashAIAOEdz6DFNmqwxaSVZsQF/APQ6zmn2bGe oRDSKzAu4G5vCZTRlcaTQSTsNEGsHh43j7UMcPx+KmFfzaSuhSudQ8qSImk1l8H92l1c0ilS 01Hl3k55MIGbFYCQ1N/YGW4ROejTTWiv4gQ5LCjAeug39KpPDawk8kIh67PrhS5ULNOYkx5Y Xy9gjPvDX/NDZDQ/kK6sv9pD0DvJW2DwDZuQk5qn8BQTignGKIT1D57jZrcllHfRT7W9iI9G ABENUJS6T+yqrASko7NLbgXPkSxlpyISZ++8ChG6y/yvbSMNUivBwjTlpg2Q+sHa7TSvdSlc vOHLnCeWsP29ys2tjtiv9lsAAwUH/RqHMwTPPUqkZgvK+oplXPCbd7ljZSc10vzGByDW4XPi d6jN302li6y2s0k6MEi6fRx//pKaJBf8HQMOVGgxl6Q7Ria9SAU/tFZtKxY0Y/4CwxfIpgN0 knyYSJYfxJeTfJ2mZcQlyBQyDCneRHv3/oJ85+bcUQMIESA8jye9ME0oaPv0UcyqS/vJrnPw gXhgtOPiYM3cd7Rl3SrPkXujyu85jv+r3lrToror421hV8LpH2aUDaXbB+spJhNzrtfTpxkk I7VM8BPQDl30O425U3UAdNyF72gemfoLzshNcSM4Lz2jmOk24ey3KdVRGK6UWY1Rq+YNvAho oBFQ9jCaRr/CSQQYEQIACQUCRHNasgIbDAAKCRBhSmkFKfFqGFyUAKDnyYF/PreTRskASBuv G/uPhU+W7wCdF0YFI08wflQw5uErrC2i/DQ1Ou0= Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-GND-Sasl: glpi@ll-experts.com From: Fedora@FamilleCollet.com (Remi Collet) Hi, Using "crypt" function is a mess (perhaps one of the reason for password_hash) This proposal provides more bindings: * crypt_gensalt($salt, $count) * crypt_preferred_method() * crypt_checksalt($salt) And more Algo * scrypt * yescrypt * gost-yescrypt These were already usable but very hard to use without a salt. Small breaking change CRYPT_* constants are now string with algo prefix See https://github.com/php/php-src/pull/15870 A single test for now, showing usage and checking compatibility with password_hash Open for discussion Remi