Mercurial > p > roundup > code
comparison roundup/configuration.py @ 8239:6bd11a73f2ed
issue2551253. default hash is PBKDF2-SHA512.
The default password hashing algorithm has been upgraded to
PBKDF2-SHA512 from PBKDF2-SHA1. The default pbkdf2 rounds in the
config file has been changed to 250000.
Doc updated.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Mon, 30 Dec 2024 02:57:46 -0500 |
| parents | 5a2b9435a04d |
| children | b99e76e76496 |
comparison
equal
deleted
inserted
replaced
| 8238:05405220dc38 | 8239:6bd11a73f2ed |
|---|---|
| 1137 "reader has a limit on the size of individual fields\n" | 1137 "reader has a limit on the size of individual fields\n" |
| 1138 "starting with python 2.5. Set this to a higher value if you\n" | 1138 "starting with python 2.5. Set this to a higher value if you\n" |
| 1139 "get the error 'Error: field larger than field limit' during\n" | 1139 "get the error 'Error: field larger than field limit' during\n" |
| 1140 "import."), | 1140 "import."), |
| 1141 (IntegerNumberGeqZeroOption, 'password_pbkdf2_default_rounds', | 1141 (IntegerNumberGeqZeroOption, 'password_pbkdf2_default_rounds', |
| 1142 '2000000', | 1142 '250000', |
| 1143 "Sets the default number of rounds used when encoding passwords\n" | 1143 "Sets the default number of rounds used when encoding passwords\n" |
| 1144 "using the PBKDF2 scheme. Set this to a higher value on faster\n" | 1144 "using any PBKDF2 scheme. Set this to a higher value on faster\n" |
| 1145 "systems which want more security.\n" | 1145 "systems which want more security. Use a minimum of 250000\n" |
| 1146 "for PBKDF2-SHA512 which is the default hash in Roundup 2.5.\n" | |
| 1146 "PBKDF2 (Password-Based Key Derivation Function) is a\n" | 1147 "PBKDF2 (Password-Based Key Derivation Function) is a\n" |
| 1147 "password hashing mechanism that derives hash from the\n" | 1148 "password hashing mechanism that derives hash from the\n" |
| 1148 "password and a random salt. For authentication this process\n" | 1149 "password and a random salt. For authentication this process\n" |
| 1149 "is repeated with the same salt as in the stored hash.\n" | 1150 "is repeated with the same salt as in the stored hash.\n" |
| 1150 "If both hashes match, the authentication succeeds.\n" | 1151 "If both hashes match, the authentication succeeds.\n" |