3 ms·
PBKDF2 will be in Django 1.4: https://code.djangoproject.com/ticket/15367 https://code.djangoproject.com/ticket/15367 edit Let me also add... this is for auth
by po 15y ago
PBKDF2 will be in Django 1.4:
https://code.djangoproject.com/ticket/15367 https://code.djangoproject.com/ticket/15367
edit
Let me also add... this is for auth/password hashing, not data encryption. To any people reading this: if you don't understand the difference, and you are responsible for writing web applications, then please read up on it.
The data that Valve was storing (CC info) needs to be encrypted and I'm assuming that data then needs to be unencryptable. They have to store the key because they have to be able to recover the plain text. With password hashing, you will never need to be able to recover the password.
- ubernostrum 15y agoAlso, if you're using Django, consider Playdoh: https://github.com/mozilla/playdoh https://github.com/mozilla/playdoh It's what we use at Mozilla as the basis for most of our Django-based stuff, and gets you bcrypt password hashing -- even on older Django releases -- for free, along with some other niceties that probably need to find their way upstream soon :)
- Semiapies 15y agoVery interesting stuff - thanks!