<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/python-packages/passlib.git/docs/narr, branch stable</title>
<subtitle>foss.heptapod.net: python-libs/passlib
</subtitle>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/'/>
<entry>
<title>quickstart.rst: grammar fixes</title>
<updated>2019-01-12T09:32:29+00:00</updated>
<author>
<name>Kenyon Ralph</name>
<email>kenyon@kenyonralph.com</email>
</author>
<published>2019-01-12T09:32:29+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/commit/?id=0df31367f2def9cc87cb11cf7b35ba23f2d7bb3f'/>
<id>0df31367f2def9cc87cb11cf7b35ba23f2d7bb3f</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Per issue 83, all "harden_verify" code is now deprecated &amp; a noop.</title>
<updated>2017-01-29T21:27:43+00:00</updated>
<author>
<name>Eli Collins</name>
<email>elic@assurancetechnologies.com</email>
</author>
<published>2017-01-29T21:27:43+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/commit/?id=83d4c5b5237129e246536b7d686e7d79c4bc0fd2'/>
<id>83d4c5b5237129e246536b7d686e7d79c4bc0fd2</id>
<content type='text'>
will be removed completely in 1.8.

Rationale:
Aside from the arguments in issue 83, performed a timing analysis,
and decided harden_verify framework wasn't going to be easily workable
to prevent a timing attack anyways (see attached admin/plot_verify_timing.py script).

Changes:
* dummy_verify() has been kept around, but now uses .verify() against a dummy hash,
which is guaranteed to have correct timing (though wastes cpu cycles).

* Removed most harden_verify code, treating it as NOOP just like min_verify_time.
  Similarly, removed most documentation references to.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
will be removed completely in 1.8.

Rationale:
Aside from the arguments in issue 83, performed a timing analysis,
and decided harden_verify framework wasn't going to be easily workable
to prevent a timing attack anyways (see attached admin/plot_verify_timing.py script).

Changes:
* dummy_verify() has been kept around, but now uses .verify() against a dummy hash,
which is guaranteed to have correct timing (though wastes cpu cycles).

* Removed most harden_verify code, treating it as NOOP just like min_verify_time.
  Similarly, removed most documentation references to.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix typo in quickstart</title>
<updated>2017-01-10T22:03:25+00:00</updated>
<author>
<name>PavloKapyshin</name>
<email>i@93z.org</email>
</author>
<published>2017-01-10T22:03:25+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/commit/?id=51f21eb091243fe4abf0915a4c391c548e24e9a9'/>
<id>51f21eb091243fe4abf0915a4c391c548e24e9a9</id>
<content type='text'>
(grafted from 79e0a8831b10971a7aa47a2f919fd1fa045df6c8)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
(grafted from 79e0a8831b10971a7aa47a2f919fd1fa045df6c8)
</pre>
</div>
</content>
</entry>
<entry>
<title>docs: wording tweaks, emphasized 1.7 changes in hash tutorial, added note about saslprep()</title>
<updated>2016-11-27T17:22:41+00:00</updated>
<author>
<name>Eli Collins</name>
<email>elic@assurancetechnologies.com</email>
</author>
<published>2016-11-27T17:22:41+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/commit/?id=8ee063dd5f436fdd035e6f596b82ba61bde079a6'/>
<id>8ee063dd5f436fdd035e6f596b82ba61bde079a6</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>docs: minor wording corrections, replaced 'encrypt' with 'hash' in a bunch of places.</title>
<updated>2016-11-25T16:53:32+00:00</updated>
<author>
<name>Eli Collins</name>
<email>elic@assurancetechnologies.com</email>
</author>
<published>2016-11-25T16:53:32+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/commit/?id=5e230694bdc3c16a6962d3a57ec821584dccdc23'/>
<id>5e230694bdc3c16a6962d3a57ec821584dccdc23</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>docs: LARGE update to documentation, tutorials added, pages relocated</title>
<updated>2016-11-20T19:11:35+00:00</updated>
<author>
<name>Eli Collins</name>
<email>elic@assurancetechnologies.com</email>
</author>
<published>2016-11-20T19:11:35+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/passlib.git/commit/?id=a54c5ba533592f7113fd3a4a86bf8a036baa7860'/>
<id>a54c5ba533592f7113fd3a4a86bf8a036baa7860</id>
<content type='text'>
* moved a bunch of pages into 'docs/narr' narrative subsection.
  added placeholder pages in old locations, to minimize inbound link breakage.

* split history into separate pages, was getting way too long.
  removed toplevel CHANGES file, not feasible under new structure.

* passlib.ifc split into reference &amp; tutorial portions,
  tutorial allowed subsuming a bunch of other hash-usage examples.

* added standard fragments for warning about insecure hashes,
  added them to top of a LOT of hash doc pages.

* updated references, various layout tweaks
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* moved a bunch of pages into 'docs/narr' narrative subsection.
  added placeholder pages in old locations, to minimize inbound link breakage.

* split history into separate pages, was getting way too long.
  removed toplevel CHANGES file, not feasible under new structure.

* passlib.ifc split into reference &amp; tutorial portions,
  tutorial allowed subsuming a bunch of other hash-usage examples.

* added standard fragments for warning about insecure hashes,
  added them to top of a LOT of hash doc pages.

* updated references, various layout tweaks
</pre>
</div>
</content>
</entry>
</feed>
