Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove McfHasher impls for pbkdf2 and scrypt crates #219

Merged
merged 1 commit into from
Aug 27, 2021

Conversation

tarcieri
Copy link
Member

The Modular Crypt Format (MCF) is a legacy format, and the implementations provided in the pbkdf2 and scrypt crates implement a bespoke RustCrypto-specific format.

Since that format has been introduced, support has been added to both crates for the newer PHC String Format:

https://github.com/P-H-C/phc-string-format/blob/master/phc-sf-spec.md

See the "Usage" rustdoc for the respective crates for information on how to use the PHC string format.

Previous releases of these respective crates support converting from the MCF hash format to the PHC format using McfHasher::upgrade_mcf_hash:

https://docs.rs/password-hash/0.3.0/password_hash/trait.McfHasher.html#tymethod.upgrade_mcf_hash

Before upgrading these crates to the new release which removes MCF hash support, please use the older releases to upgrade all of your password hashes in MCF format to the new PHC format.

The Modular Crypt Format is a legacy format, and the implementations
provided in the `pbkdf2` and `scrypt` crates implement a bespoke
RustCrypto-specific format.

Since that format has been introduced, support has been added to both
crates for the newer PHC String Format:

https://github.com/P-H-C/phc-string-format/blob/master/phc-sf-spec.md

See the "Usage" rustdoc for the respective crates for information on how
to use the PHC string format.

Previous releases of these respective crates support converting from the
MCF hash format to the PHC format using `McfHasher::upgrade_mcf_hash`:

https://docs.rs/password-hash/0.3.0/password_hash/trait.McfHasher.html#tymethod.upgrade_mcf_hash

Before upgrading these crates to the new release which removes MCF hash
support, please use the older releases to upgrade all of your password
hashes in MCF format to the new PHC format.
@tarcieri tarcieri merged commit 5080349 into master Aug 27, 2021
@tarcieri tarcieri deleted the pbkdf2+scrypt/remove-mcfhasher-impls branch August 27, 2021 23:41
This was referenced Aug 28, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant