Passwords: BCRYPT changed to default algorithm

Author: dg

src/Security/Passwords.php

@@ -28,7 +28,7 @@ public static function hash(string $password, array $options = []): string
 			throw new Nette\InvalidArgumentException("Cost must be in range 4-31, $options[cost] given.");
 		}
 
-		$hash = password_hash($password, PASSWORD_BCRYPT, $options);
+		$hash = password_hash($password, PASSWORD_DEFAULT, $options);
 		if ($hash === false || strlen($hash) < 60) {
 			throw new Nette\InvalidStateException('Hash computed by password_hash is invalid.');
 		}
@@ -50,6 +50,6 @@ public static function verify(string $password, string $hash): bool
 	 */
 	public static function needsRehash(string $hash, array $options = []): bool
 	{
-		return password_needs_rehash($hash, PASSWORD_BCRYPT, $options);
+		return password_needs_rehash($hash, PASSWORD_DEFAULT, $options);
 	}
 }