Refactor password_hash()

Pull salt generation out to a helper.
Merge options/hash into single switch.
Restore php_error->php_error_docref from last diff. (Error messages matter)

Refactor password.c

Use zend_string instread of char*/size_t
Clean up use of scope vars
Get rid of some temporaries/overstacked expressions.

Compatibility with libargon2 versions 20161029 and 20160821

libargon2 20161029 introduces the `type` parameter to the argon2_encodedlen
function that is not present in 20160821. This cha

Compatibility with libargon2 versions 20161029 and 20160821

libargon2 20161029 introduces the `type` parameter to the argon2_encodedlen
function that is not present in 20160821. This change ensures the Argon2
functionality introduced in RFC `argon2_password_hash` is compatible with
both versions, as the library version that package maintainers package may
differ.

show more ...

Merge branch 'PHP-7.1'

* PHP-7.1:
Fixed condition check
Fixed condition check
another place

Conflicts:
ext/mcrypt/mcrypt.c

Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
Fixed condition check

Fixed condition check

Update copyright headers to 2017

Update copyright headers to 2017

Update copyright headers to 2017

Use new param API in standard

Use zend_string_free instead of efree

Fingers crossed I didn't break the build.

Changing m_cost and t_cost to memory_cost and time_cost
- Updating tests
- Adjusting cost factors:
- memory_cost = 1 MiB
- time_cost = 2
- threads = 2

Removing Argon2d, changing config arg to --with-password-argon2

Argon2d is not suitable for password_hashing. To ensure best practices
within password_*, Argon2d was removed.

--

Removing Argon2d, changing config arg to --with-password-argon2

Argon2d is not suitable for password_hashing. To ensure best practices
within password_*, Argon2d was removed.

--with-argon2 implies the full feature set of Argon2, whereas this
feature only implements Argon2i within password_*. Consequently
the feature flag was renamed to --with-password-argon2

show more ...

Fixing potential memory leak with encoded in password_hash
Using zend_string_alloc instead of char* for out and encoded
variables

Removing argon2 library files in favor of --with-argon2[=DIR]

- Configure flag now accepts --with-argon2 for dynamic linking with
libargon2. Argon2 will be enabled in password_* only i

Removing argon2 library files in favor of --with-argon2[=DIR]

- Configure flag now accepts --with-argon2 for dynamic linking with
libargon2. Argon2 will be enabled in password_* only if this
flag is passed.
- --with-argon2 config flag allows user passed directory for linking
- Added Argon2 specific tests to ensure existing tests do not fail
when argon2 is disable

show more ...

Reverting PASSWORD_DEFAULT to PASSWORD_BCRYPT

Indicating constants as defaults
Minor coding standards change

Adding test cases for Argon2i and Argon2d

Added Windows config.w32 changes
Updated constants in php_password.h

Working implementation with password_hash, password_verify

Introducing Argon2 memory, time, and lanes constants

PASSWORD_ARGON2_MEMORY_COST
PASSWORD_ARGON2_TIME_COST
PASSWORD_ARGON2_LANES

Implementing password_verify and password_get_info for Argon2

Fixed compilation warnings

Remove HAVE_CRYPT checks

We always provide a crypt implementation. HAVE_CRYPT is only
relevant as to whether the crypt() C function exists.

Moved buffer from heap to stack

Merge branch 'PHP-5.6' into PHP-7.0

* PHP-5.6:
Happy new year (Update copyright to 2016)

Happy new year (Update copyright to 2016)