4 ms·
The PEP is not accurate, probably outdated. Linux distros are converging towards using libxcrypt with yescrypt, which is a modern password hashing function. If
by hannob 3y ago
The PEP is not accurate, probably outdated.
Linux distros are converging towards using libxcrypt with yescrypt, which is a modern password hashing function. If you have a crypt function that wires back to libxcrypt's crypt, you can use that.
It's a bit unfortunate that people seem to be unable to agree on a modern password hash (other places tend to use scrypt or argon2), but well, I think yescrypt is fine, and having a way to generate and verify crypt-compatible hashes is certainly useful functionality.