3
77%
master: 77%

Ran 13 Oct 2016 10:12PM UTC

Files 67

Run time 7s

Badge

Embed ▾

Committed 13 Oct 2016 10:11PM UTC coverage: 76.787% (-0.3%) from 77.102%

Job # TOXENV=py34

Build Type

Pull #4

travis-ci

Committed by

web-flow

Commit Message

strengthen the password hash

The fact that we were stripping characters between hashes at all
meant that we were actually weakening the crypto, and creating
the possibility of collisions.

By encoding the result from sha with base64, we make sure we're
maintaining the crypto strength, not creating collision issues, and
avoiding problems with invalid bytes as NULL (amongst others we were
not even filtering).

This solution is close to the recommendation for such cases on
python's bcrypt package itself:
https://github.com/pyca/bcrypt/blame/master/README.rst#L142

Pull Request Pull Request #4: avoid password collisions and server crashes

Run Details

2438 of 3175 relevant lines covered (76.79%)

0.77 hits per line

radiac / mara / 25 / 3
77%
master: 77%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 25.3 (TOXENV=py34)

radiac / mara / 25 / 3 77% master: 77%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 25.3 (TOXENV=py34)

radiac / mara / 25 / 3
77%
master: 77%

README BADGES
x