Roundup Tracker - Issues

Issue 2550982

classification
Use standard library PBKDF2 support
Type: rfe Severity: normal
Components: Infrastructure Versions: devel
process
Status: fixed fixed
:
: cmeerw : cmeerw, joseph_myers
Priority: :

Created on 2018-07-25 19:47 by joseph_myers, last changed 2018-08-02 23:24 by joseph_myers.

Messages
msg6138 Author: [hidden] (joseph_myers) Date: 2018-07-25 19:47
We should prefer the standard library's PBKDF2 support in password
handling, over M2Crypto and our local code, when available (Python
2.7.8, 3.4 and later).
msg6146 Author: [hidden] (cmeerw) Date: 2018-07-29 09:40
Here is a patch: 

https://bitbucket.org/cmeerw/roundup/commits/4110b65235825062213dc295cd34
24b66f239139

Note that this removes M2Crypto support (not sure if we would still want 
to keep that?)

BTW, there is a noticeable speedup when running the tests (compared to 
the Python implementation).
msg6157 Author: [hidden] (cmeerw) Date: 2018-08-02 06:26
pushed changes in 3d0f71775e42

As far as I can tell, Debian jessie (oldstable), Ubuntu 16.04 and RHEL 
7.2 (backported) all support PBKDF2 in Python's hashlib. That probably 
only leaves Ubuntu 14.04 (as a supported distribution) for using the 
bundled implementation as a fallback.
History
Date User Action Args
2018-08-02 23:24:09joseph_myerssetstatus: new -> fixed
2018-08-02 06:26:39cmeerwsetassignee: cmeerw
resolution: fixed
messages: + msg6157
2018-07-29 09:40:03cmeerwsetnosy: + cmeerw
messages: + msg6146
2018-07-25 19:47:57joseph_myerscreate