AbandonTech / AbandonTech/abandonauth
Research and implement an alternative to passlib bcrypt
未关闭
backend
vulnerability
- 主要语言
- Python
- 星标
- 4
- 派生
- 2
- 平均合并
- 59 分钟
- 30 天内合并 PR
- 1
描述
## Summary
Bcrypt is now considered legacy and the passlib library is no longer maintained.
[The new recommended algorithms](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html) are either Argon2id or scrypt (if argon2id not available)
We can use python's standard lib `hashlib` for the scrypt algorithm https://docs.python.org/3/library/hashlib.html#hashlib.scrypt
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。