Repository navigation
password-hash: controlling output length from PasswordHasher #505
Description
Activity
Separately, if we make make the output length a mandatory parameter, should we do the same for a version instead of using a parameter to
PasswordHasher::hash_password?Should this further be extended to a default algorithm ID as well?
Right now the only way to pass an output length to
PasswordHasheris via the associatedPasswordHasher::Paramstype.However,
PasswordVerifierneeds to pass the length of the password hash (i.e. output/tag) being compared to in order to generate an equivalent-length hash.PBKDF2 also has an
lparameter, so we need to support taking it in viaParams(and perhaps we should enforce some mandatory methods on params for transmitting it or a default)