Feature #28230
Add support for PBKDF2 to hashing
| Status: | Accepted | Start date: | 2011-07-15 | |
|---|---|---|---|---|
| Priority: | Should have | Due date: | ||
| Assigned To: | Stefan Neufeind | % Done: | 0% |
|
| Category: | - | Spent time: | - | |
| Target version: | - | |||
| PHP Version: | Sprint Focus: | |||
| Complexity: |
Description
An implementation is already pending for FLOW3 (see #26786, https://review.typo3.org/#change,2332)
which is planned to replace MD5 (current default). It would be great to have this available for passwords (FE/BE) and stdWrap.hash (see #28095).
I'm not yet sure how it would fit within current sysext "saltedpasswords" though.
Related issues
History
#1 Updated by Mathias Schreiber 8 months ago
- Status changed from New to Needs Feedback
- Assigned To set to Stefan Neufeind
Is this still valid?
#2 Updated by Stefan Neufeind 8 months ago
- Status changed from Needs Feedback to Accepted
still not available in TYPO3 CMS (saltedpasswords, TypoScript). The hash-stdWrap relys on the php-hash-functions and even on a recent PHP a call to hash_algos() doesn't seem to support PBKDF2.
#3 Updated by Marcus Krause 8 months ago
I started with this feature in March 2013 - see https://twitter.com/t3sec/status/313413250693881858
Let's see if I can find this code somewhere here. :))
#4 Updated by Stefan Neufeind 8 months ago
We should have an implemention in Flow as well already (see description).