Page 1 of 1

FEU using Argon2 or Bcrypt

Posted: Thu Mar 21, 2019 8:38 pm
by utopia
Hi there

I have a project where FEU salting is not secure enough for a client. Has anyone tried or know if there is a Argon2 or bcrypt solution for FEU (and hopefully the CMS users)?

Happy to code something up but I cannot see how it could be upgrade safe.

Thanks in advance
Michael

Re: FEU using Argon2 or Bcrypt

Posted: Thu Mar 21, 2019 8:56 pm
by calguy1000
The new version of FEU uses bcrypt for any newly saved passwords.
For backwards compatibility it can still READ and authenticated two different types of older passwords. but it only writes using bcrypt encrypted hashes.

Re: FEU using Argon2 or Bcrypt

Posted: Thu Mar 21, 2019 8:58 pm
by utopia
Beautiful - this is why CMSMS is the best CMS platform in the world!

Re: FEU using Argon2 or Bcrypt

Posted: Thu Apr 11, 2019 11:19 pm
by utopia
Hi there

Just hit a snag with upgrading as now existing user properties now come up with random characters.

Does that piece of code need updating to handle algorithm changes?