summaryrefslogtreecommitdiff
path: root/django/contrib/auth/hashers.py
AgeCommit message (Expand)Author
2016-04-25Refs #26033 -- Added password hasher support for Argon2 v1.3.Bas Westerbaan
2016-03-22Fixed #26395 -- Skipped the CryptPasswordHasher tests on platforms with a dum...Tim Graham
2016-03-08Fixed #26033 -- Added Argon2 password hasher.Bas Westerbaan
2016-03-01Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login.Florian Apolloner
2016-02-11Updated some comments for BCryptSHA256PasswordHasher.Tim Graham
2016-01-09Fixed a typo in BCryptPasswordHasher docstringMatt Robenolt
2016-01-02Fixed #26016 -- Restored contrib.auth hashers compatibility with py-bcrypt.Tim Graham
2015-09-23Increased the default PBKDF2 iterations for the 1.10 release cycle.Tim Graham
2015-07-13Explicitly passed rounds as rounds to bcrypt.gensalt()Curtis Maloney
2015-03-30Fixed #24115 -- Allowed bcrypt hashers to upgrade passwords on rounds change.Tim Graham
2015-02-20Removed reference to iteration count in the PBKDF2 hasher docstring.Simon Charette
2015-02-20Fixed PBKDF2PasswordHasher comments to reflect reality.Frank Wiles
2015-02-06Sorted imports with isort; refs #23860.Tim Graham
2015-01-16Increased the default PBKDF2 iterations.Tim Graham
2014-12-24Fixed #20349 -- Moved setting_changed signal to django.core.signals.Collin Anderson
2014-11-19Simplified caching of password hashers.Aymeric Augustin
2014-07-11Bump the default iterations for PBKDF2.Alex Gaynor
2014-03-03Fixed many typos in comments and docstrings.Rodolfo Carvalho
2014-02-08Fixed #21674 -- Deprecated the import_by_path() function in favor of import_s...Berker Peksag
2013-11-30Fixed #21535 -- Fixed password hash iteration upgrade.Tim Graham
2013-11-09Fixed #21398 -- Fixed BCryptSHA256PasswordHasher with py-bcrypt and Python 3.Tim Graham
2013-10-21Force update of the password on iteration count changes.Florian Apolloner
2013-10-10Whitespace cleanup.Tim Graham
2013-09-24Revert "Ensure that passwords are never long enough for a DoS."Florian Apolloner
2013-09-19Increase default PBKDF2 iterationsPaul McMillan
2013-09-15Ensure that passwords are never long enough for a DoS.Russell Keith-Magee
2013-09-10Fixed #20841 -- Added messages to NotImplementedErrorsGregor MacGregor
2013-08-29Fixed #20989 -- Removed explicit list comprehension inside dict() and tuple()Tim Graham
2013-08-04Fixed a number of lint warnings, particularly around unused variables.Alex Gaynor
2013-08-04Deprecated SortedDict (replaced with collections.OrderedDict)Curtis Maloney
2013-07-29Deprecated django.utils.importlibClaude Paroz
2013-07-03Fixed #20675 -- `check_password` should work when no password is specified.Simon Charette
2013-06-18Fixed #20079 -- Improve security of password reset tokensErik Romijn
2013-06-18Fixed #20593 -- Allow blank passwords in check_password() and set_password()Erik Romijn
2013-06-15Fixed #20599 -- Changed wording of ValueError raised by _load_libraryJaap Roes
2013-05-13Recommend using the bcrypt library instead of py-bcryptDonald Stufft
2013-05-11Properly force bytes or str for bcrypt on Python3Donald Stufft
2013-03-26Fixed #20138 -- Added BCryptSHA256PasswordHasherDonald Stufft
2013-02-25Fixed #18144 -- Restored compatibility with SHA1 hashes with empty salt.Aymeric Augustin
2013-02-04Fixed #17061 -- Factored out importing object from a dotted pathClaude Paroz
2013-02-02Added missing parentheses in if clauseClaude Paroz
2013-02-02Fixed #18144 -- Added backwards compatibility with old unsalted MD5 passwordsClaude Paroz
2012-12-22Fixed #19509 -- Fixed crypt/bcrypt non-ascii password encodingClaude Paroz
2012-09-12Fixed #18182 -- Made is_usable_password check if hashing algorithm is correctClaude Paroz
2012-08-29Replaced many smart_bytes by force_bytesClaude Paroz
2012-08-11[py3] Decoded base64-encoded hash in contrib.auth.hashersAndrews Medina
2012-08-09[py3k] use the base64 module, instead of bytes.encode('base64')Alex Gaynor
2012-08-07[py3] Ported django.utils.encoding.Aymeric Augustin
2012-06-07Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.Claude Paroz
2012-06-06Fixed #18184 -- Moved algorithm identification code to hashers moduleClaude Paroz