id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
24115	Bcrypt hashers don't implement must_update	Alex Rothberg	nobody	"If the number of rounds is changed for the [https://github.com/django/django/blob/5dddd79433ceb88ab67d9851b49a44ce5b8f509c/django/contrib/auth/hashers.py#L273 bcrypt hashers] it does not appear that the must_update will never return True. This is because the [https://github.com/django/django/blob/5dddd79433ceb88ab67d9851b49a44ce5b8f509c/django/contrib/auth/hashers.py#L216 default implementation is used].

For comparison, see [https://pythonhosted.org/passlib/lib/passlib.context.html#hash-migration passlib] which does in fact perform migrations for bcrypt."	Bug	new	Uncategorized	dev	Normal				Unreviewed	0	0	0	0	0	0