Timo Sirainen <tss@iki.fi>

Solar Designer <solar@openwall.com> (src/lib/md5.c, src/auth/passdb-pam.c)

Andrey Panin <pazke@donpac.ru> (src/auth/mech-apop.c, src/auth/mech-login.c,
  src/lib-ntlm/*, src/auth/mech-ntlm.c, src/auth/mech-rpa.c)

Joshua Goodall <joshua@roughtrade.net> (src/auth/mech-cram-md5.c,
  src/doveadm/doveadm-pw.c)

Jakob Hirsch (src/lib-sql/driver-sqlite.c)

Jelmer Vernooij <jelmer@samba.org> (src/auth/mech-gssapi.c)

Vaclav Haisman <v.haisman@sh.cvut.cz> (src/lib/ioloop-kqueue.c,
  src/lib/ioloop-notify-kqueue.c)

Portions Copyright (c) 2008 Apple Inc.  All rights reserved.

Blowfish code by Solar Designer <solar at openwall.com>

SMTP fuzzer code by Catena cyber <p.antoine at catenacyber.fr>

Grepping 'Patch by' from ChangeLog shows up more people.