From 99d1ecc2f48b10a7755f9d6e1ecf4274aecc45b4 Mon Sep 17 00:00:00 2001 From: Nikita Popov Date: Sat, 29 Sep 2018 20:12:28 +0000 Subject: [PATCH] Don't use mcrypt_create_iv in password_hash docs Also reference sodium_crypto_pwhash_str (patch by Marcus Bointon). Merged into this commit because I don't understand edit.php.net git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@345734 c90b9560-bf6c-de11-be94-00142212c4b1 --- reference/password/functions/password-hash.xml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/reference/password/functions/password-hash.xml b/reference/password/functions/password-hash.xml index ce36d0ae33..b81722f7de 100644 --- a/reference/password/functions/password-hash.xml +++ b/reference/password/functions/password-hash.xml @@ -231,7 +231,7 @@ $2y$12$QjSH496pcT5CEbzjD/vtVeH03tfHKFy36d4J0Ltp3lRtee9HDxY3K */ $options = [ 'cost' => 11, - 'salt' => mcrypt_create_iv(22, MCRYPT_DEV_URANDOM), + 'salt' => random_bytes(22), ]; echo password_hash("rasmuslerdorf", PASSWORD_BCRYPT, $options); ?> @@ -381,6 +381,7 @@ Argon2 hash: $argon2i$v=19$m=1024,t=2,p=2$YzJBSzV4TUhkMzc3d3laeg$zqU/1IN0/AogfP4 password_verify crypt userland implementation + sodium_crypto_pwhash_str