ports/146847: New port: security/p5-Crypt-PBKDF2

Victor Popov v.a.popov at gmail.com
Sat May 22 22:40:02 UTC 2010


>Number:         146847
>Category:       ports
>Synopsis:       New port: security/p5-Crypt-PBKDF2
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sat May 22 22:40:01 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Victor Popov
>Release:        FreeBSD 8.0-STABLE amd64
>Organization:
>Environment:
FreeBSD vic.hcn-strela.ru 8.0-STABLE FreeBSD 8.0-STABLE #0: Fri Dec  4 00:48:18 MSK 2009     root at vic.hcn-strela.ru:/usr/obj/usr/src/sys/VIC  amd64
>Description:
New port for perl module found at CPAN

PBKDF2 is a secure password hashing algorithm that uses the techniques of
"key strengthening" to make the complexity of a brute-force attack arbitrarily
high. PBKDF2 uses any other cryptographic hash or cipher (by convention,
usually HMAC-SHA1, but Crypt::PBKDF2 is fully pluggable), and allows for an
arbitrary number of iterations of the hashing function, and a nearly unlimited
output hash size (up to 2**32 - 1 times the size of the output of the backend
hash). The hash is salted, as any password hash should be, and the salt may
also be of arbitrary size.

See also: RFC2898, PKCS#5 version 2.0: http://tools.ietf.org/html/rfc2898


This port requires ports/146841 to be commited first, because it depends on devel/p5-MooseX-Method-Signatures>=0.30, and there is only 0.29 in ports now.
>How-To-Repeat:

>Fix:


Patch attached with submission follows:

# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#	p5-Crypt-PBKDF2
#	p5-Crypt-PBKDF2/pkg-plist
#	p5-Crypt-PBKDF2/pkg-descr
#	p5-Crypt-PBKDF2/distinfo
#	p5-Crypt-PBKDF2/Makefile
#
echo c - p5-Crypt-PBKDF2
mkdir -p p5-Crypt-PBKDF2 > /dev/null 2>&1
echo x - p5-Crypt-PBKDF2/pkg-plist
sed 's/^X//' >p5-Crypt-PBKDF2/pkg-plist << 'e5911b65d1a6f46e99da5bf4637775c6'
X at comment $FreeBSD$
X%%SITE_PERL%%/Crypt/PBKDF2.pm
X%%SITE_PERL%%/Crypt/PBKDF2/Hash.pm
X%%SITE_PERL%%/Crypt/PBKDF2/Hash/DigestHMAC.pm
X%%SITE_PERL%%/Crypt/PBKDF2/Hash/HMACSHA1.pm
X%%SITE_PERL%%/Crypt/PBKDF2/Hash/HMACSHA2.pm
X%%SITE_PERL%%/%%PERL_ARCH%%/auto/Crypt/PBKDF2/.packlist
X at dirrmtry %%SITE_PERL%%/%%PERL_ARCH%%/auto/Crypt/PBKDF2
X at dirrmtry %%SITE_PERL%%/%%PERL_ARCH%%/auto/Crypt
X at dirrmtry %%SITE_PERL%%/Crypt/PBKDF2/Hash
X at dirrmtry %%SITE_PERL%%/Crypt/PBKDF2
X at dirrmtry %%SITE_PERL%%/Crypt
e5911b65d1a6f46e99da5bf4637775c6
echo x - p5-Crypt-PBKDF2/pkg-descr
sed 's/^X//' >p5-Crypt-PBKDF2/pkg-descr << '80289dc1ff554077d70dc4479578cfc2'
XPBKDF2 is a secure password hashing algorithm that uses the techniques of
X"key strengthening" to make the complexity of a brute-force attack arbitrarily
Xhigh. PBKDF2 uses any other cryptographic hash or cipher (by convention,
Xusually HMAC-SHA1, but Crypt::PBKDF2 is fully pluggable), and allows for an
Xarbitrary number of iterations of the hashing function, and a nearly unlimited
Xoutput hash size (up to 2**32 - 1 times the size of the output of the backend
Xhash). The hash is salted, as any password hash should be, and the salt may
Xalso be of arbitrary size.
X
XSee also: RFC2898, PKCS#5 version 2.0: http://tools.ietf.org/html/rfc2898
X
XWWW:	http://search.cpan.org/dist/Crypt-PBKDF2/
80289dc1ff554077d70dc4479578cfc2
echo x - p5-Crypt-PBKDF2/distinfo
sed 's/^X//' >p5-Crypt-PBKDF2/distinfo << '476529a326d0c79e9fe2056bfd2edcb7'
XMD5 (Crypt-PBKDF2-0.101170.tar.gz) = 1fbf8d79172e03383ad19b994affa441
XSHA256 (Crypt-PBKDF2-0.101170.tar.gz) = ff416e3b5f19673af2ca93879639f350e06865065100f1452bb049232d3c0004
XSIZE (Crypt-PBKDF2-0.101170.tar.gz) = 13679
476529a326d0c79e9fe2056bfd2edcb7
echo x - p5-Crypt-PBKDF2/Makefile
sed 's/^X//' >p5-Crypt-PBKDF2/Makefile << '127843c73a2bea4998b8e6fdde7fa206'
X# New ports collection makefile for:	p5-Crypt-PBKDF2
X# Date created:		2010-05-23
X# Whom:			Victor Popov <v.a.popov at gmail.com>
X#
X# $FreeBSD$
X#
X
XPORTNAME=	Crypt-PBKDF2
XPORTVERSION=	0.101170
XCATEGORIES=	security perl5
XMASTER_SITES=	CPAN
XMASTER_SITE_SUBDIR=	../by-authors/id/A/AR/ARODLAND
XPKGNAMEPREFIX=	p5-
X
XMAINTAINER=	v.a.popov at gmail.com
XCOMMENT=	The PBKDF2 password hashing algorithm
X
XRUN_DEPENDS=	p5-Digest-HMAC>=1.01:${PORTSDIR}/security/p5-Digest-HMAC \
X		p5-Moose>=1:${PORTSDIR}/devel/p5-Moose \
X		p5-MooseX-Method-Signatures>=0.30:${PORTSDIR}/devel/p5-MooseX-Method-Signatures \
X		p5-Try-Tiny>=0.04:${PORTSDIR}/lang/p5-Try-Tiny \
X		p5-namespace-autoclean>=0:${PORTSDIR}/devel/p5-namespace-autoclean
X
XMAN3=		Crypt::PBKDF2.3 \
X		Crypt::PBKDF2::Hash.3 \
X		Crypt::PBKDF2::Hash::DigestHMAC.3 \
X		Crypt::PBKDF2::Hash::HMACSHA1.3 \
X		Crypt::PBKDF2::Hash::HMACSHA2.3
X
X.include <bsd.port.pre.mk>
X
X.if ${PERL_LEVEL} < 501000
XRUN_DEPENDS+=	p5-Digest-SHA>=0:${PORTSDIR}/security/p5-Digest-SHA
X.endif
X
X.if ${PERL_LEVEL} < 501001
XRUN_DEPENDS+=	p5-Digest>=1.16:${PORTSDIR}/security/p5-Digest
X.endif
X
XBUILD_DEPENDS=	${RUN_DEPENDS}
X
XPERL_CONFIGURE=	yes
X
X.include <bsd.port.post.mk>
127843c73a2bea4998b8e6fdde7fa206
exit


>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list