1. 11 May, 2020 1 commit
  2. 04 May, 2020 1 commit
  3. 02 May, 2020 1 commit
  4. 23 Nov, 2016 2 commits
  5. 20 Nov, 2016 2 commits
    • Eli Collins's avatar
      docs: LARGE update to documentation, tutorials added, pages relocated · b9c5d5aeb7fb
      Eli Collins authored
      * moved a bunch of pages into 'docs/narr' narrative subsection.
        added placeholder pages in old locations, to minimize inbound link breakage.
      
      * split history into separate pages, was getting way too long.
        removed toplevel CHANGES file, not feasible under new structure.
      
      * passlib.ifc split into reference & tutorial portions,
        tutorial allowed subsuming a bunch of other hash-usage examples.
      
      * added standard fragments for warning about insecure hashes,
        added them to top of a LOT of hash doc pages.
      
      * updated references, various layout tweaks
      b9c5d5aeb7fb
    • Eli Collins's avatar
      6f51c1e2ed4f
  6. 10 Jun, 2016 1 commit
    • Eli Collins's avatar
      .encrypt() method renamed to .hash(), other api cleanups · 1f7421b35b75
      Eli Collins authored
      .encrypt()
      ----------
      hash.encrypt() & context.encrypt() have been renamed to .hash().
      this should take care of the long-standing issue 21 (the poor naming of .encrypt).
      per docs, legacy aliases will remain in place until passlib 2.0.
      
      .genhash() / .genconfig()
      -------------------------
      taking advantage of this reorganization to also deprecate .genconfig()
      and .genhash() -- they're not really useful in a modern system,
      nor as needed for historical support as initially thought:
      .genconfig() will be retired completely in passlib 2.0;
      .genhash() is rolled into the new .hash() method along with .encrypt().
      1f7421b35b75
  7. 04 Aug, 2015 1 commit
  8. 23 Jul, 2015 2 commits
  9. 21 Jul, 2015 1 commit
    • Eli Collins's avatar
      bunch of bcrypt updates, centered around the bsd wraparound bug. · 7adbe5f07f56
      Eli Collins authored
      bcrypt
      ------
      * added support & UT for $2b$ hash format.
        not making it the default yet, for backward compat.
      
      * large refactor of how bcrypt backends are loaded:
        instead of per-backend workarounds within each _calc_checksum_<backend>()
        function: now using runtime detection of specific capabilities & workarounds,
        that runs whenever set_backend() is called, combined with consolidated
        workaround code within _calc_checksum(), controlled by the flags
        set by set_backend().
      
        this detection now looks for:
          - the 8bit bug: throws a PasslibSecurityError
          - the wraparound bug: issues warning, sets flag enabling a workaround.
          - support for 2/2y/2b: if backend lacks support for particular variants,
            sets flag enabling workaround to add support.
      
      * os_crypt backend now just issues error if it can't handle a password encoding;
        rather than trying fallbacks first -- edge case anyways, and likely
        to not have any fallbacks when it does happen. simplifies backend code.
      
      * added UTs to make sure wraparound-vulnerable passwords are hashed correctly
        (as a 72char string, not a 1-3 char string that's repeated).
      
      * internal blowfish code's ident parsing clarified.
      
      other
      -----
      * added exc.PasslibSecurityError for fatal runtime errors.
      
      * test framework: os_crypt backends no longer expected to use
        *any* backend as fallback, just ones with lower priority than os_crypt.
      
      * test framework: crypt_stub() wrapper now subclasses the handler,
        so it can use an independant backend, instead of changing global
        backend for duration of call (made parallel testing hard)
      
      docs
      ----
      * added entry to bcrypt page, writing down wraparound bug details,
        and how passlib is handling it.
      
      * all versions of pybcrypt & bcryptor seem to be vulnerable to wraparound bug.
        starting process of deprecating these backends: marked bcrypt backend
        as 'preferred' throughout the documentation.
      
      --HG--
      branch : stable
      7adbe5f07f56
  10. 27 Apr, 2012 1 commit
  11. 13 Mar, 2012 1 commit
  12. 08 Jul, 2011 1 commit
  13. 29 Jun, 2011 1 commit
  14. 22 Jun, 2011 1 commit
    • Eli Collins's avatar
      installation updates · 8524814ff5f4
      Eli Collins authored
      * updated install instructions to account for python 3 support
      * removed dependancy on distribute/setuptools:
          - no longer using find_packages()
          - using build_py_2to3 cmdclass as fallback if distribute's use_2to3 not available
      * some tweaks to make "setup.py test" work properly
      8524814ff5f4
  15. 01 Jun, 2011 1 commit
  16. 04 May, 2011 1 commit
  17. 03 May, 2011 1 commit
  18. 26 Mar, 2011 2 commits
  19. 24 Mar, 2011 1 commit
    • Eli Collins's avatar
      documentation updates · e95a551f4d19
      Eli Collins authored
      =====================
      * CryptContext docs finished
      * README / LICENSE updated
      * license text changed to correct BSD wording
      * embarassingly, the history.rst is kinda off about release versions.
        tried to make it give readers better outline.
      * misc doc updates
      * some handler names (eg: 'context', 'all') now forbidden by register_crypt_handler()
      * bumped setup.cfg to b1
      e95a551f4d19
  20. 15 Mar, 2011 1 commit
    • Eli Collins's avatar
      documentation work · 9a43eb4d379f
      Eli Collins authored
      ==================
      * finished password hash api description
      * various documentation cleanups
      * removed unused quickstart doc
      9a43eb4d379f
  21. 06 Jan, 2011 1 commit