Skip to content

Consider using Bouncy Castle BCrypt implementation #16880

Open
@jgrandja

Description

@jgrandja

BCryptPasswordEncoder currently uses an internal implementation of BCrypt.

We should consider removing the internal implementation and use Bouncy Castle's implementation instead.

NOTE: Argon2PasswordEncoder and SCryptPasswordEncoder already uses Bouncy Castle's implementation.

Related gh-16879

Metadata

Metadata

Assignees

No one assigned

    Labels

    for: team-attentionThis ticket should be discussed as a team before proceedingtype: enhancementA general enhancement

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions