Tags: hlandau/passlib
Tags
v1.0.10: Add Argon2i, PBKDF2, versioning support
The following major changes are in this release:
- Add support for Argon2i, contributed by Francis Chuang.
- Add support for PBKDF2-SHA1, PBKDF-SHA256 and PBKDF-SHA512,
contributed by Tom Price.
- Add support for an upgrade versioning mechanism to enable safe hash
upgrades in multi-server environments without breaking when passlib
is updated. See the new func UseDefaults for more information.
IMPORTANT: You must change your code to take advantage of upgrades
to new, more preferred hashes (Argon2i). This opt-in is necessary to
avoid breaking gradual rollouts in multi-server deployments. See
func UseDefaults for information on what to do.
If you do not update your code to use func UseDefaults, passlib will
still work fine and still use (by default) the perfectly secure
scrypt-sha256, but you will not benefit from automatic upgrades to
now more preferred algorithms (namely Argon2i, the new default).
There are no breaking changes.
PreviousNext