Hi
On 2026-10-29 21:06, Andrey Andreev wrote:
I'd like to open the discussion on a new password hashing algorithm
that
I've been working on, named bcrypt-wrap.
RFC link: https://wiki.php.net/rfc/password_bcrypt_wrap
Pull request: https://github.com/php/php-src/pull/25040 (just pushed
it, CI
still running)
Thank you for the RFC and entertaining my questions in Discord. As
promised, I want to put the points onto the list for public record:
- Can you please add a (pseudo) code description of your construction to
the RFC? Prose is needlessly ambiguous as also evidenced by Kamil’s
misunderstanding.
- The section on “bcrypt-sha256” is very vague in how your construction
is better. Given that both bcrypt-sha256 and your bcrypt-wrap (with
SHA-512) use a HMAC construction using the (BCrypt) salt as a key as the
pre-hash, folks will rightfully wonder how the bcrypt-wrap construction
is better than that of bcrypt-sha256 (other than using a different hash
function) and should not be required to “reverse engineer” the
differences.
Best regards
Tim Düsterhus
