在 php 5.2.6 中访问 bcrypt 的最简单方法?
我想使用 bcrypt 来提高密码哈希安全性,但我被困在 php 5.2.6 上(由于使用 debian 5.0)。侵入性最小的方法是什么?
显然,suhosin 补丁捆绑了某种 bcrypt 实现,但我不知道是否会出现性能问题,也不知道如何压缩 suhosin 附带的会话更改。
或者,我可以追求从 php 5.2.6 升级到 php 5.3,它具有对 bcrypt 的内置后备支持,但我预计我将不得不处理升级带来的兼容性问题。
或者,如果有某种方法可以做到这一点,我希望能够在 debian 中 apt-get 安装对 bcrypt 的服务器/外部软件支持。
最简单的方法是什么?
I want to up my password hashing security with bcrypt, but I'm stuck on php 5.2.6 (due to being on debian 5.0). What would the the least invasive way to do so?
Apparently the suhosin patch bundles some kind of bcrypt implementation but I don't know if there will be performance issues and I don't know how to squash the changes to sessions that come with suhosin.
Alternatively I could persue an upgrade from php 5.2.6 to php 5.3, which has builtin fallback support for bcrypt, but then I expect I'll have to deal with compatibility issues from upgrading.
Alternatively I would love to just be able to apt-get install server/external software support for bcrypt in debian if there is some way to do that.
What's the simplest approach?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
最简单的方法是安装较新版本的 PHP。 Dotdeb 有一个:
Simplest approach is to just install a newer version of PHP. Dotdeb has one: