cloak_ecto icon indicating copy to clipboard operation
cloak_ecto copied to clipboard

Published 20 hours ago • verified publisher icon danielberkompas

:heavy_minus_sign: Remove dependency on PBKDF2

Open danielberkompas opened this issue 2 years ago • 1 comments

This is a breaking change. OTP versions > 24.2 now include the pbkdf2_hmac/5 function in the :crypto module, thanks to this PR: https://github.com/erlang/otp/pull/5421

The new function does not include support for all the algorithms that the old dependency supported, namely md4, md5 and ripemd. However, I think this is a valid tradeoff.

It is no longer necessary to add a :pbkdf2 dependency in order to use the PBKDF2 field type.

danielberkompas avatar Nov 12 '22 05:11 danielberkompas

Given we're now up to Erlang 26, it'd be great to see this merged. Are you actively supporting all the way back to 23?

jc00ke avatar May 24 '23 22:05 jc00ke