Hi!

> https://wiki.php.net/rfc/password_hash

Looks good. The only question I have is for password_make_salt() - do we
need the user to specify length? I think length is defined by the
algorithm in the most cases.  Maybe convert it to password_make_salt(int
$salt_type = PASSWORD_SALT_BCRYPT, int $length)
with both arguments optional and one of salt types being
PASSWORD_SALT_OTHER which just generates given length?

-- 
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227



-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to