view release on metacpan or  search on metacpan

Changes  view on Meta::CPAN

  - Skip 'bmkpasswd' command tests on MSWin32

    While the utility is reported to work without issue, the test does not,
    and I lack access to an appropriate machine for deeper diving.

2.011004 2016-03-09

  - Fall back to Term::ReadKey on MSWin32

2.011003 2016-03-09

  - Fall back to Term::ReadKey to turn off terminal echo on 5.8.x, if
    available; if not, warn loudly and suggest it before prompting for a
    password to crypt

2.011002 2016-03-09

  - Fix `bmkpasswd` executable on 5.8.x (no POSIX::ECHO available)

2.011001 2016-03-08

  - Add `bmkpasswd --available` for listing available crypt methods

  - Adjust constant time comparison to avoid potentially leaking any
    information regarding the length of random-length SHA salts

  - Add proper Test::Cmd tests for `bmkpasswd`

2.010001 2015-10-23

  - Reintroduce constant time comparison for hashes

  - Minor test expansion

2.009001 2015-08-08

  - Support calling Crypt::Bcrypt::Easy->crypt as a class method

2.008002 2015-08-02

  - Bytes::Random::Secure::Tiny now defaults to seeding from nonblocking
    sources; fix our constructor call when 'strong' salts are enabled

2.008001 2015-07-02

  - Switch to Bytes::Random::Secure::Tiny

2.007001 2015-06-21

  - API change; passwdcmp now returns explicit undef rather than an empty
    list

  - API change; export mkpasswd and passwdcmp by default

  - Add 'reset_seed' option to Crypt::Bcrypt::Easy's constructor as sugar for
    calling 'mkpasswd_forked' at object construction time

2.006001 2015-06-21

  - Add 'mkpasswd_forked' function for resetting salt generator seeds in child
    processes or threads.

2.005004 2015-03-11

  - 'use strictures 2;' for saner fatal warnings behavior

  - Faster tests

2.005003 2014-12-02

  - Kill constant time comparison completely; this was a silly addition that
    has only introduced bugs.

  - Switch to 'cpanfile' dependency list

2.005002 2014-09-18

  - Better Crypt::Bcrypt::Easy documentation.

  - Improvements to constant time comparison.

  - Minor optimizations & cleanups.

2.005001 2014-09-11

  - SECURITY; passwdcmp() constant time comparison fixes.
    
    The last character of a hash can be skipped during constant time
    comparison in previous versions (starting at 1.82.4).
    
    Real-world risk is reasonably low, but this does make collisions more
    likely. Mea culpa.

  - POD / test expansion

2.004002 2014-05-12

  - Minor cleanups & test improvements

2.004001 2013-10-16

  - Fix MD5 failures on machines without Crypt::Passwd::XS

2.004000 2013-10-15

  - Add mkpasswd_available function for checking avail hash methods

2.003001 2013-10-14

  - Fix failing t/04_hashopts.t on machines without SHA support

  - Use Pod::Usage to provide --help / --usage / --man

2.003000 2013-10-13

  - Support for passing in a salt generator coderef
  
  - mkpasswd() can accept parameters via a HASH

2.002000 2013-09-12