[wp-trac] [WordPress Trac] #21022: Use bcrypt for password hashing; updating old hashes

[WordPress Trac]

#21022: Use bcrypt for password hashing; updating old hashes
-------------------------------------------+--------------------------
 Reporter:  th23                           |       Owner:  johnbillion
     Type:  enhancement                    |      Status:  closed
 Priority:  normal                         |   Milestone:  6.8
Component:  Security                       |     Version:  3.4
 Severity:  normal                         |  Resolution:  fixed
 Keywords:  has-dev-note needs-unit-tests  |     Focuses:
-------------------------------------------+--------------------------
Changes (by johnbillion):

 * status:  reopened => closed
 * resolution:   => fixed


Comment:

 In [changeset:"60124" 60124]:
 {{{
 #!CommitTicketReference repository="" revision="60124"
 Security: Don't fail the Argon2-related tests when it's not available on
 the test infrastructure.

 These tests are not critical to the bcrypt functionality, they exist to
 reaffirm that the  underlying use of `password_hash()` and
 `password_verify()` supports this algorithm. The Argon2 tests therefore
 shouldn't unnecessarily fail on hosts that don't support it.

 Props desrosj, johnbillion.

 Fixes #21022
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/21022#comment:258>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform