perl-Crypt-PBKDF2-0.261630-1.3 RPM for noarch

From OpenSuSE Tumbleweed for noarch

PBKDF2 is a secure password hashing algorithm that uses the techniques of
"key strengthening" to make the complexity of a brute-force attack
arbitrarily high. PBKDF2 uses any other cryptographic hash or cipher (by
convention, usually HMAC-SHA1, but 'Crypt::PBKDF2' is fully pluggable), and
allows for an arbitrary number of iterations of the hashing function, and a
nearly unlimited output hash size (up to 2**32 - 1 times the size of the
output of the backend hash). The hash is salted, as any password hash
should be, and the salt may also be of arbitrary size.

Provides

• perl-Crypt-PBKDF2
• perl(Crypt::PBKDF2)
• perl(Crypt::PBKDF2::Hash)
• perl(Crypt::PBKDF2::Hash::DigestHMAC)
• perl(Crypt::PBKDF2::Hash::HMACSHA1)
• perl(Crypt::PBKDF2::Hash::HMACSHA2)
• perl(Crypt::PBKDF2::Hash::HMACSHA3)

Requires

• perl(:MODULE_COMPAT_5.44.0)
• perl(Crypt::URandom)
• perl(Digest) >= 1.16
• perl(Digest::HMAC) >= 1.10
• perl(Digest::SHA)
• perl(Digest::SHA3) >= 0.220
• perl(Module::Runtime)
• perl(Moo) >= 2
• perl(Moo::Role) >= 2
• perl(Try::Tiny) >= 0.40
• perl(Type::Tiny)
• perl(Types::Standard) >= 1.0.5
• perl(namespace::autoclean)
• perl(strictures) >= 2
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

Artistic-1.0 OR GPL-1.0-or-later

Changelog

* Fri Jun 12 2026 Tina Müller <timueller+perl@suse.de>
  - updated to 0.261630
    see /usr/share/doc/packages/perl-Crypt-PBKDF2/Changes
    Version 0.261630: 2026-06-11
    * Change the default hash algorithm to HMAC-SHA256, and increase the
      default number of iterations to 600,000, in line with current OWASP
      recommendations (CVE-2026-9641). bsc#1268234
    * Generate salts using Crypt::URandom (a strong system RNG) instead of
      perl's builtin `rand()`, which is not cryptographically secure
      (CVE-2026-9638). bsc#1268233
    * Use a constant-time comparison in `validate` to avoid timing attacks
      (CVE-2017-20240). bsc#1268232
* Wed Apr 14 2021 Tina Müller <tina.mueller@suse.com>
  - Initial submission

Files

/usr/lib/perl5/vendor_perl/5.44.0/Crypt
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2.pm
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2/Hash
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2/Hash.pm
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2/Hash/DigestHMAC.pm
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2/Hash/HMACSHA1.pm
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2/Hash/HMACSHA2.pm
/usr/lib/perl5/vendor_perl/5.44.0/Crypt/PBKDF2/Hash/HMACSHA3.pm
/usr/share/doc/packages/perl-Crypt-PBKDF2
/usr/share/doc/packages/perl-Crypt-PBKDF2/Changes
/usr/share/doc/packages/perl-Crypt-PBKDF2/README
/usr/share/licenses/perl-Crypt-PBKDF2
/usr/share/licenses/perl-Crypt-PBKDF2/LICENSE
/usr/share/man/man3/Crypt::PBKDF2.3pm.gz
/usr/share/man/man3/Crypt::PBKDF2::Hash.3pm.gz
/usr/share/man/man3/Crypt::PBKDF2::Hash::DigestHMAC.3pm.gz
/usr/share/man/man3/Crypt::PBKDF2::Hash::HMACSHA1.3pm.gz
/usr/share/man/man3/Crypt::PBKDF2::Hash::HMACSHA2.3pm.gz
/usr/share/man/man3/Crypt::PBKDF2::Hash::HMACSHA3.3pm.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Aug 3 00:04:55 2026