Closed thisispiers closed 2 years ago
sodium_crypto_pwhash() warns "empty password" when the value for a blind index is an empty string or null.
My current workaround is to add this line to the beginning of BoringCrypto::blindIndexSlow()
if ($plaintext === '') { $plaintext = ' '; }
A unique value from a constant might be preferable.
Fixed in v4.0.1
v4.0.1
paragonie-security
commented
2 years ago paragonie-security
commented
2 years ago
sodium_crypto_pwhash() warns "empty password" when the value for a blind index is an empty string or null.
My current workaround is to add this line to the beginning of BoringCrypto::blindIndexSlow()
if ($plaintext === '') { $plaintext = ' '; }A unique value from a constant might be preferable.