Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:60846 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 45437 invoked from network); 15 Jun 2012 16:23:37 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 15 Jun 2012 16:23:37 -0000 Authentication-Results: pb1.pair.com header.from=hermanradtke@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=hermanradtke@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.42 as permitted sender) X-PHP-List-Original-Sender: hermanradtke@gmail.com X-Host-Fingerprint: 209.85.215.42 mail-lpp01m010-f42.google.com Received: from [209.85.215.42] ([209.85.215.42:48210] helo=mail-lpp01m010-f42.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 42/E3-11656-8816BDF4 for ; Fri, 15 Jun 2012 12:23:37 -0400 Received: by lagy4 with SMTP id y4so2494554lag.29 for ; Fri, 15 Jun 2012 09:23:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=/bc5MdGKh76nQ+f3YAPc4wItuweuA0EihIbJTgig02w=; b=kCm4i6o0VZlU2AfmtI1f8R1pjLxHYVH1TXkjurLfyyp9eI6vQnC+e0ViL1hSf8zJ5G gaJ9gBCsDPgDhrxSZm0WexkgAdPQ2dG4+GAh6FrPyqgjZ1+GOyHWINLp6jjMubaFNohy KNW/T1cWuB/uLtNkjmsUHFB5cr8VpH8IyvNBUGYfx0PTZVt1TOUyeKvzgv8BMtJSi3M0 j3yaPuIKYhLF2NANg3gE0JnxoWMUYI0g5BO8zAn0KhT92i9/g9VCUP9Nqg9NGs5RgexV f8PpykgzSJvn1EbI+n2QUYJFVE1Xa7LKsoPfEZTuey5z1315T83lIZGfIXCnbIQWiJl4 FgNw== MIME-Version: 1.0 Received: by 10.112.30.41 with SMTP id p9mr2917111lbh.26.1339777413400; Fri, 15 Jun 2012 09:23:33 -0700 (PDT) Received: by 10.112.11.72 with HTTP; Fri, 15 Jun 2012 09:23:33 -0700 (PDT) In-Reply-To: References: Date: Fri, 15 Jun 2012 09:23:33 -0700 Message-ID: To: Nikita Popov , PHP internals Content-Type: text/plain; charset=UTF-8 Subject: Re: [PHP-DEV] Adding a simple API for secure password hashing? From: hermanradtke@gmail.com (Herman Radtke) This userland library already solves all the issues you outlined with bcrypt: http://www.openwall.com/phpass/ The API is very easy to use, has been around for a while and has a number of detailed articles that explain how to use it. -- Herman Radtke hermanradtke@gmail.com | http://hermanradtke.com