From 8fbd8da1992a23bb752b349d90d1b633b299ae96 Mon Sep 17 00:00:00 2001 From: Dominique FOURNIER Date: Thu, 13 Apr 2023 22:09:08 +0200 Subject: [PATCH] Password : Blowfish need more salt entropy (25 chars instead of 16) --- src/Password.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Password.php b/src/Password.php index f36b065..2b4aa87 100644 --- a/src/Password.php +++ b/src/Password.php @@ -30,7 +30,7 @@ class Password "CRYPT_MD5" => [ "hash" => CRYPT_MD5, "size" => 12, "pre" => "$1$", "post" => "$" ], "CRYPT_BLOWFISH" => [ - "hash" => CRYPT_BLOWFISH, "size" => 16, "pre" => "$2y$11$", + "hash" => CRYPT_BLOWFISH, "size" => 25, "pre" => "$2y$11$", "post" => "$" ], "CRYPT_SHA256" => [ "hash" => CRYPT_SHA256, "size" => 16, "pre" => "$5\$rounds=5000$",