Stdlib: crypt() — POSIX DES/BCRYPT string hashing (ext/standard/password.c parity)

[PurHur]

Category

stdlib

Problem

crypt() is not registered. Zend exposes the legacy one-way hash API (CRYPT_STD_DES, CRYPT_EXT_DES, CRYPT_MD5, CRYPT_BLOWFISH). This compiler implements password_hash() / password_verify() via libcrypt in AOT (lib/AOT/runtime/password_crypto.c) but does not expose the standalone crypt() builtin.

php-src reference

• ext/standard/password.c — PHP_FUNCTION(crypt), php_crypt()
• ext/standard/basic_functions.stub.php — CRYPT_* constants

Repro (failure today)

<?php
$salt = '$2y$10$' . str_repeat('a', 22);
echo crypt('secret', $salt), "\n";

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php -r "echo function_exists(\"crypt\")?\"yes\":\"no\";"'
# no

Zend PHP 8.x: 60-char bcrypt hash string
This compiler (VM): fatal — undefined function crypt

Scope (this repo)

Layer	Files	Notes
VM	ext/standard/crypt.php, ext/standard/VmPassword.php (reuse libcrypt helpers)	Delegate to host crypt(3) or reuse AOT runtime
JIT/AOT	ext/standard/JitPassword.php / lib/AOT/runtime/password_crypto.c	Share setting validation with password_hash()
Register	ext/standard/Module.php	Export CRYPT_* constants
Tests	test/compliance/cases/stdlib/crypt.phpt	Bcrypt salt round-trip subset

Done when

• function_exists('crypt') is true on VM
• Repro prints a bcrypt hash matching Zend prefix/format for the same salt
• Invalid salt emits PHP Warning and returns * sentinel (Zend parity)
• ./script/ci-fast.sh --filter crypt green
• docs/capabilities.md row for crypt

Verification

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php repro.php'
php repro.php  # compare output

Links

• Stdlib: password_hash() and password_verify() (PASSWORD_DEFAULT) #172 password_hash libcrypt path · Epic: Self-host critical path — compiler compiles itself (M3→M5) #1492 self-host

[PurHur]

claim: cursor-agent-lane-b — starting this run

[PurHur]

Merged via #3948.

Verification

• function_exists('crypt') → yes on VM
• Bcrypt repro: 60-char hash with $2y$10$ prefix (matches Zend PHP 8.2)
• Invalid salt ('', '$2y$10$', '!!!') → *0 sentinel (php-src crypt.c parity)
• PHPUnit: vendor/bin/phpunit --filter "VMTest::testCases.*crypt|PasswordBuiltinTest|AotTest.*crypt" — OK (5 tests)

Reference: php-src ext/standard/crypt.c — PHP_FUNCTION(crypt), php_crypt()