On Thu, Apr 11, 2013 at 04:39:12PM +0200, Marios Makassikis wrote: > The report in [2] suggests python-passlib as an alternative. Upon installing > it, I attempted to use bcrypt(), only to find out it relies on py-bcrypt > (which > is the module formerly packaged as python-bcrypt) or bcryptor [3]. None of > these modules are available in Debian repositories, leading me to the > conclusion that bcrypt is currently unusable in python on Debian (other than > installing the module from PyPI or building a custom .deb).
This report confused me at first. python-bcrypt and python3-bcrypt are available in Debian. It is based on py-bcrypt however, which passlib says has a security issue. I just opened #796853 for this security issue.
