➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author serhiy.storchaka
Recipients christian.heimes, dstufft, gregory.p.smith, jafo, serhiy.storchaka
Date 2017-10-05.12:32:51
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1507206772.04.0.213398074469.issue31702@psf.upfronthosting.co.za>
In-reply-to
Content 
Blowfish salt should contain the binary logarithm of the number of rounds (from 4 to 31) (see issue31664). SHA-* salt can contain an explicit number of rounds in the form '$rounds={value}$'. It is bound to the range from 1000 to 999999999, the default is 5000.

I propose to allow to specify the number of rounds in generated salt for SHA-* methods as well as for Blowfish. For unifying interface we can specify the number of rounds instead of its logarithm for Blowfish, and calculate the logarithm internally.

The question is what to do with the value that is not a power of two for Blowfish. Should we raise an error or silently replace it with the upper power of two?
History
Date User Action Args
2017-10-05 12:32:52serhiy.storchakasetrecipients: + serhiy.storchaka, gregory.p.smith, jafo, christian.heimes, dstufft
2017-10-05 12:32:52serhiy.storchakasetmessageid: <1507206772.04.0.213398074469.issue31702@psf.upfronthosting.co.za>
2017-10-05 12:32:51serhiy.storchakalinkissue31702 messages
2017-10-05 12:32:51serhiy.storchakacreate