See http://seclists.org/oss-sec/2011/q2/632 We are using this code in etc/standard/crypt_blowfish.c
End of the day here for me, so if someone could go through that and apply the patch plus figure out the BC issues with the $2x$ stuff discussed here: http://seclists.org/oss-sec/2011/q2/636 I would appreciate it. -Rasmus -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php