[FEATURE] Add PBKDF2 based password storage to EXT:saltedpasswords
Implement the PBKDF2 password hashing for EXT:saltedpasswords. PBKDF2 is the NIST recommended way to store passwords in a FIPS compliant way. The storage format is identical with passlib from Python to enable some portability as there's no official storage format yet. The choice of iteration count has been set to a value that matches the performance characteristics of the Blowfish/Bcrypt hashing. Resolves: #28230 Releases: master Change-Id: I87817129b317fd1b4ebf4bae101b66b3fcebb6ce Reviewed-on: https://review.typo3.org/42342 Reviewed-by:Georg Ringer <georg.ringer@gmail.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Markus Klein <markus.klein@typo3.org> Tested-by:
Markus Klein <markus.klein@typo3.org>
Showing
- typo3/sysext/core/Documentation/Changelog/master/Feature-28230-AddSupportForPBKDF2ToSaltedpasswords.rst 16 additions, 0 deletions...er/Feature-28230-AddSupportForPBKDF2ToSaltedpasswords.rst
- typo3/sysext/saltedpasswords/Classes/Salt/Pbkdf2Salt.php 409 additions, 0 deletionstypo3/sysext/saltedpasswords/Classes/Salt/Pbkdf2Salt.php
- typo3/sysext/saltedpasswords/Classes/Salt/SaltFactory.php 2 additions, 1 deletiontypo3/sysext/saltedpasswords/Classes/Salt/SaltFactory.php
- typo3/sysext/saltedpasswords/Documentation/Overview/Index.rst 5 additions, 1 deletion...3/sysext/saltedpasswords/Documentation/Overview/Index.rst
- typo3/sysext/saltedpasswords/Resources/Private/Language/locallang.xlf 3 additions, 0 deletions.../saltedpasswords/Resources/Private/Language/locallang.xlf
- typo3/sysext/saltedpasswords/Tests/Unit/Salt/Pbkdf2SaltTest.php 345 additions, 0 deletions...sysext/saltedpasswords/Tests/Unit/Salt/Pbkdf2SaltTest.php
- typo3/sysext/saltedpasswords/Tests/Unit/Salt/SaltFactoryTest.php 10 additions, 0 deletions...ysext/saltedpasswords/Tests/Unit/Salt/SaltFactoryTest.php
Please register or sign in to comment