[BUG] passlib seems in stasis?

[mbuechse]

passlib is used in compliance monitor. It doesn't seem to keep up with bcrypt -- see https://github.com/pyca/bcrypt/issues/684#issuecomment-1902590553

Maybe we can use bcrypt directly?

[berendt]

Makes sense to replace with bcrypt or cryptography.

[mbuechse]

So we need to replace it with

• https://pypi.org/project/argon2-cffi/
• https://pypi.org/project/bcrypt/

Both seem to be reasonably simple to use.

Potential resource:

• https://foss.heptapod.net/python-libs/passlib/-/tree/branch/stable/passlib/handlers