4 ms·
Hmm, unfortunately I think Symfony2 runs passwords through 1 round of SHA1 unless a custom password "encoder" is used [1]. [1] = http://symfony.com/doc/2.0/boo
by carbocation 13y ago
Hmm, unfortunately I think Symfony2 runs passwords through 1 round of SHA1 unless a custom password "encoder" is used [1].
[1] = http://symfony.com/doc/2.0/book/security.html#encoding-the-user-s-password http://symfony.com/doc/2.0/book/security.html#encoding-the-u...
- terolacu 13y agoBcrypt and PBKDF2 are not custom, they are part of the framework: http://symfony.com/doc/current/reference/configuration/security.html#reference-security-pbkdf2 http://symfony.com/doc/current/reference/configuration/secur...
- carbocation 13y agoThose were added in Symfony2.2; my last experience was with 2.1. Also, I understand that neither of those is default; one should be.