Feature #31679

Support multiple password hashing strategies

Added by Christopher Hlubek over 1 year ago. Updated over 1 year ago.

Status:Resolved Start date:2011-11-08
Priority:Should have Due date:
Assignee:Christopher Hlubek % Done:

100%

Category:Security
Target version:TYPO3 Flow Base Distribution - 1.1 beta 1
PHP Version: Complexity:
Has patch:No
Votes: 0

Description

The security framework should support multiple password hashing strategies. An identifier could be used to differentiate between different implementations. The hashed passwords should be self-descriptive, such that they contain an identifier for the password hashing strategy to use for validating the hashed password.

This allows an easy transition from PBKDF2 to BCrypt or other hashing strategies in the future. It also allows for the usage of different security levels in one application .


Related issues

related to TYPO3.Flow - Bug #32991: Wrong default password hashing strategy Resolved 2012-01-05

Associated revisions

Revision c3c9dfcc
Added by Christopher Hlubek over 1 year ago

[FEATURE] Support multiple password hashing strategies

Add configurable password hashing strategies to the HashService.

Resolves: #31679
Releases: 1.1
Change-Id: I6a8689d3dc38b7c9a7b20407a87f1688a1b3af20

History

Updated by Mr. Hudson over 1 year ago

  • Status changed from New to Under Review

Patch set 1 of change I6a8689d3dc38b7c9a7b20407a87f1688a1b3af20 has been pushed to the review server.
It is available at http://review.typo3.org/6598

Updated by Mr. Hudson over 1 year ago

Patch set 2 of change I6a8689d3dc38b7c9a7b20407a87f1688a1b3af20 has been pushed to the review server.
It is available at http://review.typo3.org/6598

Updated by Gerrit Code Review over 1 year ago

Patch set 3 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/6598

Updated by Gerrit Code Review over 1 year ago

Patch set 4 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/6598

Updated by Christopher Hlubek over 1 year ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

Updated by Karsten Dambekalns over 1 year ago

  • Target version changed from 1.1 to 1.1 beta 1

Also available in: Atom PDF