bcrypt

bcrypt copied to clipboard

Document packages bundled inside wheels

2

The binary wheels on PyPI currently ship with a shared object compiled using Rust which seems to have some external dependencies: https://github.com/pyca/bcrypt/blob/4.0.1/src/_bcrypt/Cargo.lock For now, the corresponding packages including their version...

stefan6419846

Bump once_cell from 1.20.3 to 1.21.3 in /src/_bcrypt

1

Bumps [once_cell](https://github.com/matklad/once_cell) from 1.20.3 to 1.21.3. Changelog Sourced from once_cell's changelog. 1.21.3 Outline more initialization in race: #284, #285. 1.21.2 Relax success ordering from AcqRel to Release in race: #278....

dependabot[bot]

Invalid salt when setting salt manually in versions 4.0+

1

Sorry if this is not the correct channel to ask this question, but I cannot find any answers to it. This code works fine in any version less than 4.0.0:...

jose-lpa

Raise ValueError if password is longer than 72 bytes

1

See discussion in #969 Moved some existing test cases (that ensured bytes after the 72th were truncated) to a separate fixture and wrote new tests to assert an exception is...

paketb0te

Security: input over 72 char: throw error

9

See https://n0rdy.foo/posts/20250121/okta-bcrypt-lessons-for-better-apis/ Bcrypt is typically used to encrypt passwords. But it currently silently accepts input over 72 char even though characters 73 and beyond are ignored. This enables appsec attacks...

larrykluger

ImportError: cannot import name '__author__' from 'bcrypt._bcrypt' (/.venv/lib/python3.13/site-packages/bcrypt/_bcrypt.cpython-313-darwin.so)

1

ImportError: cannot import name '__author__' from 'bcrypt._bcrypt' (/.venv/lib/python3.13/site-packages/bcrypt/_bcrypt.cpython-313-darwin.so)

ssrsec

No standard CPython 3.13 manylinux wheel (cp313-cp313-manylinux2014_x86_64.whl) published for bcrypt 5.0.0

5

The PyPI listing for bcrypt 5.0.0 only provides wheels for free-threaded Python 3.13 (cp313-cp313t-manylinux2014_x86_64.whl), PyPy, and other architectures, but not for standard CPython 3.13 on Linux (cp313-cp313-manylinux2014_x86_64.whl). This means that...

naveen1583