> On 31 Dec 2024, at 17:06, Bernd Helmle <maili...@oopsware.de> wrote:
> I adapted the code from the publicly available reference implementation > at [1]. It's based on our existing OpenSSL infrastructure in pgcrypto > and produces compatible password hashes with crypt() and "openssl > passwd" with "-5" and "-6" switches. Potentially daft question, but since we require OpenSSL to build pgcrypto, why do we need to include sha2 code instead of using the sha2 implementation in libcrypto? How complicated would it be to use the OpenSSL API instead? -- Daniel Gustafsson
