Passlib 1.4 & Earlier

1.4 (2011-05-04)

This release contains a large number of changes, both large and small. It adds a number of PBKDF2-based schemes, better support for LDAP-format hashes, improved documentation, and faster load times. In detail…

Hashes

  • added LDAP {CRYPT} support for all hashes known to be supported by OS crypt()

  • added 3 custom PBKDF2 schemes for general use, as well as 3 LDAP-compatible versions.

  • added support for Dwayne Litzenberger’s PBKDF2 scheme.

  • added support for Grub2’s PBKDF2 hash scheme.

  • added support for Atlassian’s PBKDF2 password hash

  • added support for all hashes used by the Roundup Issue Tracker

  • bsdi_crypt, sha1_crypt now check for OS crypt() support

  • salt_size keyword added to encrypt() method of all the hashes which support variable-length salts.

  • security fix: disabled unix_fallback’s “wildcard password” support unless explicitly enabled by user.

CryptContext

  • host_context now dynamically detects which formats OS crypt() supports, instead of guessing based on sys.platform.

  • added predefined context for Roundup Issue Tracker database.

  • added CryptContext.verify_and_update() convenience method, to make it easier to perform both operations at once.

  • bugfix: fixed NameError in category+min_verify_time border case

  • apps & hosts modules now use new LazyCryptContext wrapper class - this should speed up initial import, and reduce memory by not loading unneeded hashes.

Documentation

  • greatly expanded documentation on how to use CryptContexts.

  • roughly documented framework for writing & testing custom password handlers.

  • various minor improvements.

Internals

  • added generate_password() convenience method

  • refactored framework for building hash handlers, using new mixin-based system.

  • deprecated old handler framework - will remove in 1.5

  • deprecated list_to_bytes & bytes_to_list - not used, will remove in 1.5

Other

  • password hash api - as part of cleaning up optional attributes specification, renamed a number of them to reduce ambiguity:

    • renamed {xxx}_salt_chars attributes -> xxx_salt_size

    • renamed salt_charset -> salt_chars

    • old attributes still present, but deprecated - will remove in 1.5

  • password hash api - tightened specifications for salt & rounds parameters, added support for hashes w/ no max salt size.

  • improved password hash api conformance tests

  • PyPy compatibility

1.3.1 (2011-03-28)

Minor bugfix release.

  • bugfix: replaced “sys.maxsize” reference that was failing under py25

  • bugfix: fixed default_rounds>max_rounds border case that could cause ValueError during CryptContext.encrypt()

  • minor documentation changes

  • added instructions for building html documentation from source

1.3 (2011-03-25)

First public release.

  • documentation completed

  • 99% unittest coverage

  • some refactoring and lots of bugfixes

  • added support for a number of additional password schemes: bigcrypt, crypt16, sun md5 crypt, nthash, lmhash, oracle10 & 11, phpass, sha1, generic hex digests, ldap digests.

1.2 (2011-01-06)

Note

For this and all previous versions, Passlib did not exist independently, but as a subpackage of BPS, a private & unreleased toolkit library.

  • many bugfixes

  • global registry added

  • transitional release for applications using BPS library.

  • first truly functional release since splitting from BPS library (see below).

1.0 (2009-12-11)

  • CryptContext & CryptHandler framework

  • added support for: des-crypt, bcrypt (via py-bcrypt), postgres, mysql

  • added unit tests

0.5 (2008-05-10)

  • initial production version

  • consolidated from code scattered across multiple applications

  • MD5-Crypt, SHA256-Crypt, SHA512-Crypt support