Feature #79888: Constant-time password checking - TYPO3 Core - TYPO3 Forge

Custom queries

Accessibility
Easy tasks
Forge Triage
JavaScript issues
JavaScript Issues (w/o Epics/Stories)
My open issues
No feedback within 90 days
Open Bugs
Open issues of 10
Recently modified
Regressions
Stabilization Issues
Usability or UX

Actions

Copy link

Feature #79888

closed

Constant-time password checking

Added by Christian Futterlieb almost 8 years ago. Updated about 6 years ago.

Status:

Closed

Priority:

Should have

Assignee:

Category:

Authentication

Target version:

9.0

Start date:

2017-02-18

Due date:

% Done:

100%

Estimated time:

PHP Version:

Tags:

Complexity:

no-brainer

Sprint Focus:

Description

Replace all $knownPwassword == $givenPassword by either password_verify() (crypt()-based) or hash_equals() otherwise.

Related issues 1 (0 open — 1 closed)

Related to TYPO3 Core - Feature #79795: Improve saltedpasswords

Closed

2017-12-12

Actions

Issue # Delay: days Cancel

History
Notes
Property changes
Associated revisions

Actions

Copy link

Updated by Gerrit Code Review almost 8 years ago

Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review almost 8 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review almost 8 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review almost 8 years ago

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review over 7 years ago

Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review over 7 years ago

Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review over 7 years ago

Patch set 7 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review over 7 years ago

Patch set 8 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

Updated by Gerrit Code Review over 7 years ago

Patch set 9 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

#10

Updated by Gerrit Code Review over 7 years ago

Patch set 10 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51737

Actions

Copy link

#11

Updated by Riccardo De Contardi over 7 years ago

Target version changed from 8 LTS to 9.0

Actions

Copy link

#12

Updated by Christian Futterlieb over 7 years ago

Status changed from Under Review to Resolved
% Done changed from 0 to 100

Applied in changeset 77f082488154f5ae1aac9ad4da2c18e72149099b.

Actions

Copy link

#13

Updated by Gerrit Code Review over 7 years ago

Status changed from Resolved to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51853

Actions

Copy link

#14