From 56a302f338761cdda3cc1116a89687051c7c005a Mon Sep 17 00:00:00 2001 From: Tim Graham Date: Mon, 26 Feb 2018 09:12:46 -0500 Subject: [PATCH] Fixed #29141 -- Corrected BCryptPasswordHasher's docstring about truncation. --- django/contrib/auth/hashers.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/django/contrib/auth/hashers.py b/django/contrib/auth/hashers.py index c366b43435..3bab95e745 100644 --- a/django/contrib/auth/hashers.py +++ b/django/contrib/auth/hashers.py @@ -456,10 +456,8 @@ class BCryptPasswordHasher(BCryptSHA256PasswordHasher): issues. This hasher does not first hash the password which means it is subject to - the 72 character bcrypt password truncation, most use cases should prefer - the BCryptSHA256PasswordHasher. - - See: https://code.djangoproject.com/ticket/20138 + bcrypt's 72 bytes password truncation. Most use cases should prefer the + BCryptSHA256PasswordHasher. """ algorithm = "bcrypt" digest = None