Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:125527 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id 25AC41A00BD for ; Fri, 13 Sep 2024 07:58:28 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1726214430; bh=P/9g0Y8Bk7OdyLs5Tm4RG33JjEk8KLFM3TVBq01YgZs=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=in8OuLrbQL+oi3RW9WNgFrsq99v67Sh8QipMcq5OHiTWNjFNDU+8+/Zq6aqagINo9 PC7EPfzqWQzI1cyUILM1jjrOiw1N/DRiqN7Rcku9b5CVk8IyXOzYh5Du5tfvPENKwD dE5p+zxPfEqru5uwscIFErripqdVFrrLN2f+aEq9Low7Rc/C4FtIR0gSpWHJ90o7V6 is4OZ7CszRTPZ4S4V/lkxdItZkRzlmcURHpIo3uUL+BE8QUa/6YHv+ol3F6TSy0HLm Bh3420nnsQZXDe1o+kG12UUaExjTJPv4V74UNPLAlQ7Sy35mDRwzYZPjAPFafSMVQ8 /2nqx9HPi7+TA== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id E1164180061 for ; Fri, 13 Sep 2024 08:00:28 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,RCVD_IN_MSPIKE_H2, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from forward500b.mail.yandex.net (forward500b.mail.yandex.net [178.154.239.144]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Fri, 13 Sep 2024 08:00:28 +0000 (UTC) Received: from mail-nwsmtp-smtp-production-main-25.sas.yp-c.yandex.net (mail-nwsmtp-smtp-production-main-25.sas.yp-c.yandex.net [IPv6:2a02:6b8:c1c:3099:0:640:f09b:0]) by forward500b.mail.yandex.net (Yandex) with ESMTPS id 113E461476 for ; Fri, 13 Sep 2024 10:58:23 +0300 (MSK) Received: by mail-nwsmtp-smtp-production-main-25.sas.yp-c.yandex.net (smtp/Yandex) with ESMTPSA id MwfxqtGOceA0-IQ0q5thL; Fri, 13 Sep 2024 10:58:22 +0300 X-Yandex-Fwd: 1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=php.watch; s=mail; t=1726214302; bh=P/9g0Y8Bk7OdyLs5Tm4RG33JjEk8KLFM3TVBq01YgZs=; h=To:Subject:Message-ID:References:Date:From:In-Reply-To:Cc; b=MapRJp6w3l0xtra7HSCk4s+WMu9tED4u8e+BbrjO6BSEkkjDILck3XCGlcpr80/ZD 01bUJ+jtjkO4TTahugQ8wukmL27VT55UGwmHqfd3Fp9tBXrICI93PjTQvKB0yCJkln /PaIrDkw0zjKzfZjuy5/0nA5toQzSqLr/tIMfiN0= Authentication-Results: mail-nwsmtp-smtp-production-main-25.sas.yp-c.yandex.net; dkim=pass header.i=@php.watch Received: by mail-lj1-f180.google.com with SMTP id 38308e7fff4ca-2f75aaaade6so21319561fa.1 for ; Fri, 13 Sep 2024 00:58:22 -0700 (PDT) X-Gm-Message-State: AOJu0YyKUqxmdMjB/BTpPWcIxQxjJTSGAsz19GwGikkPsHo3T8JE5rfQ /+k3JVlnUNPbexYG3jblFp2kC1YQvMIEx77I0f6Gv4OykB7JnHim1S3+/mys5x+ty9SV+P5Iaop h3sUBbjQ9QnLc7lhXRw+Fn4kN4gw= X-Google-Smtp-Source: AGHT+IHjQ4c3blgOMjh+C6Uc/lmZ2dk9GvM1lrq8ifqlDnqjOkJBRzg0Lm/XSx1DSpVi6FwIKn8bN6hilNu9I+GxKk8= X-Received: by 2002:a2e:a98e:0:b0:2f7:7d69:cb5d with SMTP id 38308e7fff4ca-2f787cabc01mr36889941fa.0.1726214301861; Fri, 13 Sep 2024 00:58:21 -0700 (PDT) Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 References: <1560103a-e2b0-46b2-9089-81bcfb715352@FamilleCollet.com> In-Reply-To: <1560103a-e2b0-46b2-9089-81bcfb715352@FamilleCollet.com> Date: Fri, 13 Sep 2024 14:57:54 +0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings To: Remi Collet Cc: PHP internals Content-Type: text/plain; charset="UTF-8" From: ayesh@php.watch (Ayesh Karunaratne) > This proposal provides more bindings: > > * crypt_gensalt($salt, $count) > * crypt_preferred_method() > * crypt_checksalt($salt) > > And more Algo > > * scrypt > * yescrypt > * gost-yescrypt > Assuming the intended use case is compatibility with `/etc/shadow` or something similar, would it not make sense to add these algos to `password_hash` function, and not add new functions? I'm probably missing some valid use cases for having separate functions to have separate functions for gen/check salt, so please disregard this comment if that's the case :)