Skip to content

Port upstream bcrypt fixes and more - #44

Merged
mworrell merged 3 commits into
masterfrom
bcrypt-upstream-fixes
Oct 27, 2026
Merged

mworrell merged 3 commits into
masterfrom
bcrypt-upstream-fixes

Conversation

@mworrell

Copy link
Copy Markdown
Member
  • Ported upstream fixes; new salts use $2b$, while legacy $2a$ verification is preserved.
  • Added bounded inputs, strict salt validation, and secure memory clearing.
  • Replaced custom NIF threads and queues with OTP dirty schedulers.
  • Added regression tests, CI checks

@mworrell mworrell linked an issue Oct 27, 2026 that may be closed by this pull request
@mworrell
mworrell merged commit 938025d into master Oct 27, 2026
4 checks passed
@mworrell mworrell added this to the 2.0 milestone Oct 27, 2026
@mworrell
mworrell deleted the bcrypt-upstream-fixes branch October 27, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade to newer bcrypt.c

1 participant