delta/python-packages/passlib.git/docs, branch scrypt-dev

docs: cleanups

2016-06-11T00:23:00+00:00

passlib.handlers.scrypt: created scrypt hash handler, complete with UTs and docs

2016-06-11T00:21:32+00:00

* scrypt kdf code

  - relocated scrypt kdf code to passlib.crypto.scrypt

  - py3 compat fixes

  - split UTs out into separate file

  - removed "non-power of 2" support, not needed.

  - added wrapper which can toggle between builtin backend,
    and extenrnal scrypt package.

  - factored out n/r/p validation code so it can be used independantly
    of calling kdf itself.

* passlib.handlers.scrypt: added scrypt handler which wraps the kdf.

  - added some custom test strings, as well as adapted some reference values
    from the scrypt whitepaper.

  - added documentation page

  - integrated scrypt kdf wrapper w/ hash's HasManyBackends api

docs: minor changes

2016-06-10T21:27:17+00:00

passlib.utils.handlers / HasRounds: the 'rounds' keyword is now treated

2016-06-10T21:24:56+00:00

as a fallback for 'default_rounds', 'min_rounds', and 'max_rounds'.

this makes it easier to specify a django-style policy of "deprecate all hashes
which have a differing rounds value".

* removed special handling from 'rounds' from CryptContext parser
* tweaked affected CryptContext serialization tests
* added test for new behavior

passlib.context: deprecating the 'all' preset scheme --

2016-06-10T21:00:05+00:00

only legitimate use was for 'vary_rounds' option, which is being phased out,
and other uses like 'min_rounds' were a security issue.

* fixed CryptContext() tests to stop uses "all" kwds
* issue dep warning if "all" scheme is used
* issue config warning if anything but "vary_rounds" is used,
  since config needs to be changed (regardless of passlib version)

deprecating the 'vary_rounds' option -- very little security benefit,

2016-06-10T20:46:32+00:00

and not worth the amount of code it requires to support it.

* stripped out vary_rounds from all internal presets
* added deprecation warning if it's ever used

.encrypt() method renamed to .hash(), other api cleanups

2016-06-10T16:32:52+00:00

.encrypt()
----------
hash.encrypt() & context.encrypt() have been renamed to .hash().
this should take care of the long-standing issue 21 (the poor naming of .encrypt).
per docs, legacy aliases will remain in place until passlib 2.0.

.genhash() / .genconfig()
-------------------------
taking advantage of this reorganization to also deprecate .genconfig()
and .genhash() -- they're not really useful in a modern system,
nor as needed for historical support as initially thought:
.genconfig() will be retired completely in passlib 2.0;
.genhash() is rolled into the new .hash() method along with .encrypt().

changes: updated 1.7 TODO list, reformatted some items

2016-02-11T20:50:48+00:00

passlib.pwd: big cleanup pass, removing code that won't be ready for release

2016-02-11T20:11:35+00:00

* split generate() into genword() & genphrase() --
  APIs are just too different to keep combined.

* renamed internal calc funcs to better reflect their purpose.

* commented out PhraseGenerator's min_chars code, can't confirm
  it's doing correct thing.

* commented out password strength estimator, too half-baked.

* tried to simplify SequenceGenerator attributes.

* genword(): defined some base charsets to work with

* genphrase(): wordsets now stored uncompressed (not really that big,
  and .whl will compress everything for transport).

* fleshed out UTs for genword() & genphrase()

* updated docs

added reference for cisco_asa algorithm

2016-02-10T19:29:18+00:00