password-hash

Changed

• Bounds for blanket impl of PasswordVerifier for phc::PasswordHash [BREAKING] (#2370)

NOTE: this release was yanked to accommodate breaking changes introduced in v0.6.1.

Added

• Generic H param to traits to support multiple string formats e.g. PHC, MCF (#2110)
• Implement From<phc::Error> for Error (#2124)
• rand_core feature (#2126)
• Salt generating helper functions (try_)generate_salt (#2128)
• Error::RngFailure variant (#2337)

Changed

• Edition changed to 2024 and MSRV bumped to 1.85 (#1759)
• Extract CustomizedPasswordHasher trait (#2105)
• Bump getrandom to v0.4 (#2258)

Removed

• Encoding enum (#2102)
• PHC types moved to the phc crate, which is re-exported as password_hash::phc when the phc crate feature is enabled (#2103, #2116):
  • Ident
  • Output
  • ParamsString
  • PasswordHash
  • PasswordHashString
  • Salt
  • SaltString
  • Value
• McfHasher trait (#2334)

Added

• Error::OutputSize (#1026)
• std::error::Error::source for Error (#1264)
• getrandom feature (#1267)

Changed

• Use Salt type with PasswordHasher (#1187)
• Rename Salt::new => Salt::from_b64 (#1266)
• Rename Salt::b64_decode => Salt::decode_b64 (#1266)
• Rename SaltString::new => SaltString::from_b64 (#1266)
• Rename SaltString::b64_decode => SaltString::decode_b64 (#1266)
• Rename SaltString::b64_encode => SaltString::encode_b64 (#1266)

Fixed

• Allow Salt to be exactly the same amount as MAX_LENGTH value (#1246)

Fixed

• docs.rs metadata (#1031)

Added

• authentication category to Cargo.toml (#976)

Changed

• Leverage const_panic; MSRV 1.57 (#896)
• Rust 2021 edition upgrade (#897)
• Make Ident::new fallible; add Ident::new_unwrap (#896, #960)

Fixed

• Better Debug/Display impls for SaltString (#804)

Removed

• base64ct version restrictions (#914)

Fixed

• Remove unused lifetimes (#760)

Added

• PasswordHashString (#758)

Fixed

• Handling of empty salts in fmt::Display impl for PasswordHash (#748)
• MSRV regression from base64ct (#757)

Added

• More details to ParamValueInvalid (#713)
• SaltInvalid error (#713)
• version param to PasswordHasher (#719)
• ParamsString::add_b64_bytes method (#722)

Changed

• Rename PasswordHash::hash_password_simple => PasswordHash::hash_password (#720)
• Rename PasswordHash::hash_password => PasswordHash::hash_password_customized (#720)
• Rename Error::B64 => Error::B64Encoding (#721)

Changed

• Make max lengths of Value and Salt both 64 (#707)

Changed

• Pin subtle dependency to v2.4 (#689)

Added

• Re-export rand_core (#683)

Changed

• Use subtle crate for comparing hash Output (#631)

Changed

• Allow specifying output length and version with params (#615)
• Allow passing &str, &Salt, or &SaltString as salt (#615)
• Simplify error handling (#615)

Added

• Length constants (#600)

Changed

• Deprecate functions for obtaining length constants (#600)

Changed

• Update docs for PHC string <version> field (#593)

Fixed

• Broken b64 links in rustdoc (#594)

Changed

• Bump base64ct dependency to v1.0 (#579)

Added

• Encoding enum with bcrypt and crypt(3) Base64 support (#515)
• Support for using PasswordHash with an alternate Encoding (#518)

Changed

• Bump base64ct dependency to v0.2 (#519)

• Initial release