Jan Stępień 95f0f71441 Hash passwords with BCrypt instead of SHA1 ... BCrypt is regarded as a more secure alternative to hashing using message digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from built-in salting it is adaptable to the increasing power of modern processing units, which makes it more secure against brute-force cracking. This commit makes all passwords hashed using BCrypt. The session tokens remain generated using SHA1. Tests were updated, `rake test:units` and `rake test:functionals` didn't report any regressions. [0] http://bcrypt.sourceforge.net/ [1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871 [2] eab1c72/README.md		2011-09-07 16:05:52 +02:00
..
controllers	All specs passing now	2011-02-28 23:20:57 -08:00
factories	All specs passing now	2011-02-28 23:20:57 -08:00
fixtures	Hash passwords with BCrypt instead of SHA1	2011-09-07 16:05:52 +02:00
models	fix failing specs	2011-08-16 11:49:04 +02:00
support	Update RSpec situation. Should fix #960	2010-01-01 22:39:00 -05:00
views	All specs passing now	2011-02-28 23:20:57 -08:00
rcov.opts	Update RSpec situation. Should fix #960	2010-01-01 22:39:00 -05:00
spec.opts	Added Rspec and Webrat plugins and started porting Selenium on Rails tests to Rspec Plain Text Stories driving Webrat driving Selenium.	2008-06-23 10:02:17 +02:00
spec_helper.rb	Update RSpec situation. Should fix #960	2010-01-01 22:39:00 -05:00