Request for Comments: Prefer PHP's Builtin Crypt over System versions

• Version: 1.0
• Date: 2010-03-18
• Author: Joey Smith joey@php.net, Pierre A. Joye pajoye@php.net
• Status: Under Discussion
• First Published at: http://wiki.php.net/rfc/builtincrypt

In order to provide a consistent implementation of all crypt() algorithms for all users of PHP, it is proposed that in an upcoming release of PHP, we always use the PHP-provided versions of all supported algorithms.

1. It will simplify the m4 files for the crypt() extension.
2. It will provide consistent behaviour for all users of PHP.
3. It is internally consistent with other, similar decisions such as bundling our own timezone database and versions of various hashing algorithms.
4. The crypt() documentation has recently been dramatically improved, but only documents the built-in algorithms. An effort to maintain a list of possible system-level incompatibilities would probably be prohibitive.
5. Prevent the filing of bugs when different systems use different crypt()

1. Some systems vendors have previously shown resistance to PHP preferring its bundled versions of facilities the OS provides
2. ???