perl-Crypt-PBKDF2-0.261630-2.fc45
completeDescription
PBKDF2 is a secure password hashing algorithm that uses the techniques of "key
strengthening" to make the complexity of a brute-force attack arbitrarily high.
PBKDF2 uses any other cryptographic hash or cipher (by convention, usually
HMAC-SHA2, but Crypt::PBKDF2 is fully pluggable), and allows for an arbitrary
number of iterations of the hashing function, and a nearly unlimited output
hash size (up to 2**32-1 times the size of the output of the backend hash).
The hash is salted, as any password hash should be, and the salt may also be of
arbitrary size.
RPMs
2 files, 2 archessrc
noarch
Logs
noarch
Changelog
* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 0.261630-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jun 12 2026 Paul Howarth <paul@city-fan.org> - 0.261630-1
- Update to 0.261630 (rhbz#2488228)
- Change the default hash algorithm to HMAC-SHA256, and increase the default
number of iterations to 600,000, in line with current OWASP recommendations
(CVE-2026-9641)
- Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
builtin rand(), which is not cryptographically secure (CVE-2026-9638)
- Use a constant-time comparison in 'validate' to avoid timing attacks
(CVE-2017-20240)
- Switch to Module::Build::Tiny flow
- Package new README file
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 0.161520-25
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 0.161520-24
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jan 18 2025 Fedora Release Engineering <releng@fedoraproject.org> - 0.161520-23
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.161520-22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild