Package: python3-pbkdf2
Version: 1.3+20110613.git2a0fb15~ds0-3

pbkdf2_bin() doesn't have arguments to configure the number of
iterations and the key length, which renders it completely useless.

pbkdf2_hex() has these arguments, but always fails with a TypeError
(even if iterations and keylen are not given) since it tries to pass
them to pbkdf2_bin() which does not support them.

>>> pbkdf2.pbkdf2_hex(b'foo', b'bar')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/home/sebastian/pbkdf2.py", line 56, in pbkdf2_hex
    return pbkdf2_bin(data, salt, iterations, keylen, hashfunc).encode('hex')
TypeError: pbkdf2_bin() takes from 2 to 3 positional arguments but 5 were given

I did not check whether this is an upstream bug, or Debian specific.
But either way I suggest to implement the "iterations" and "keylen"
arguments for pbkdf2_bin().

Alternatively, you might want to consider just removing this package
from Debian. In its current state, it just causes any package that
might depend on it, being broken as well. And a PBKDF2 implementation
in plain Python isn't very useful in the first place, as with any
reasonable amount of iterations, it will run unreasonably long.

Reply via email to