Feature #31679

Support multiple password hashing strategies

Added by Christopher Hlubek over 3 years ago. Updated over 3 years ago.

Status:Resolved Start date:2011-11-08
Priority:Should have Due date:
Assigned To:Christopher Hlubek % Done:

100%

Category:Security
Target version:TYPO3 Flow Base Distribution - 1.1 beta 1
PHP Version: Complexity:
Has patch:No

Description

The security framework should support multiple password hashing strategies. An identifier could be used to differentiate between different implementations. The hashed passwords should be self-descriptive, such that they contain an identifier for the password hashing strategy to use for validating the hashed password.

This allows an easy transition from PBKDF2 to BCrypt or other hashing strategies in the future. It also allows for the usage of different security levels in one application .


Related issues

related to TYPO3.Flow - Bug #32991: Wrong default password hashing strategy Resolved 2012-01-05

Associated revisions

Revision c3c9dfcc
Added by Christopher Hlubek over 3 years ago

[FEATURE] Support multiple password hashing strategies

Add configurable password hashing strategies to the HashService.

Resolves: #31679
Releases: 1.1
Change-Id: I6a8689d3dc38b7c9a7b20407a87f1688a1b3af20

History

#1 Updated by Mr. Hudson over 3 years ago

  • Status changed from New to Under Review

Patch set 1 of change I6a8689d3dc38b7c9a7b20407a87f1688a1b3af20 has been pushed to the review server.
It is available at http://review.typo3.org/6598

#2 Updated by Mr. Hudson over 3 years ago

Patch set 2 of change I6a8689d3dc38b7c9a7b20407a87f1688a1b3af20 has been pushed to the review server.
It is available at http://review.typo3.org/6598

#3 Updated by Gerrit Code Review over 3 years ago

Patch set 3 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/6598

#4 Updated by Gerrit Code Review over 3 years ago

Patch set 4 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/6598

#5 Updated by Christopher Hlubek over 3 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

#6 Updated by Karsten Dambekalns over 3 years ago

  • Target version changed from 1.1 to 1.1 beta 1

Also available in: Atom PDF