id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
21398	Fix py-bcrypt compatibility on Python 3	arjan@…	nobody	"When using the BCryptSHA256PasswordHasher or derivatives, the verification of passwords fails when on Python 3.

This is due to the following line:
return constant_time_compare(data, bcrypt.hashpw(password, data))

In BCryptSHA256PasswordHasher.verify(), 'data' is forced to the 'bytes' type, but the output of bcrypt.hashpw() is of type 'str'. The hashpw() output should just like 'data' be passed through force_bytes() before comparison, because the comparison is now always returning False on Python3."	Bug	closed	Python 3	1.6	Release blocker	fixed		Donald Stufft	Ready for checkin	1	0	0	0	0	0