[wp-trac] [WordPress Trac] #21022: Use bcrypt for password hashing; updating old hashes

[WordPress Trac]

#21022: Use bcrypt for password hashing; updating old hashes
----------------------------------------------+--------------------------
 Reporter:  th23                              |       Owner:  johnbillion
     Type:  enhancement                       |      Status:  closed
 Priority:  normal                            |   Milestone:  6.8
Component:  Security                          |     Version:  3.4
 Severity:  normal                            |  Resolution:  fixed
 Keywords:  has-dev-note commit dev-reviewed  |     Focuses:
----------------------------------------------+--------------------------
Changes (by desrosj):

 * status:  reopened => closed
 * resolution:   => fixed


Comment:

 In [changeset:"60126" 60126]:
 {{{
 #!CommitTicketReference repository="" revision="60126"
 Security: Don't fail the Argon2-related tests when it's not available on
 the test infrastructure.

 These tests are not critical to the bcrypt functionality, they exist to
 reaffirm that the underlying use of `password_hash()` and
 `password_verify()` supports this algorithm. The Argon2 tests therefore
 shouldn't unnecessarily fail on hosts that don't support it.

 Reviewed by desrosj.
 Merges [60124] to the 6.8 branch.

 Props desrosj, johnbillion.
 Fixes #21022.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/21022#comment:261>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform