Mercurial > p > roundup > code
comparison roundup/configuration.py @ 4488:d483a40e2f82
more verbose description of password hashing, thanks to Eli Collins
| author | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
|---|---|
| date | Fri, 15 Apr 2011 18:57:17 +0000 |
| parents | 693c75d56ebe |
| children | 62239a524beb |
comparison
equal
deleted
inserted
replaced
| 4487:5e9578d35d03 | 4488:d483a40e2f82 |
|---|---|
| 538 "get the error 'Error: field larger than field limit' during\n" | 538 "get the error 'Error: field larger than field limit' during\n" |
| 539 "import."), | 539 "import."), |
| 540 (IntegerNumberOption, 'password_pbkdf2_default_rounds', '10000', | 540 (IntegerNumberOption, 'password_pbkdf2_default_rounds', '10000', |
| 541 "Sets the default number of rounds used when encoding passwords\n" | 541 "Sets the default number of rounds used when encoding passwords\n" |
| 542 "using the PBKDF2 scheme. Set this to a higher value on faster\n" | 542 "using the PBKDF2 scheme. Set this to a higher value on faster\n" |
| 543 "systems which want more security."), | 543 "systems which want more security.\n" |
| 544 "PBKDF2 (Password-Based Key Derivation Function) is a\n" | |
| 545 "password hashing mechanism that derives hash from the\n" | |
| 546 "password and a random salt. For authentication this process\n" | |
| 547 "is repeated with the same salt as in the stored hash.\n" | |
| 548 "If both hashes match, the authentication succeeds.\n" | |
| 549 "PBKDF2 supports a variable 'rounds' parameter which varies\n" | |
| 550 "the time-cost of calculating the hash - doubling the number\n" | |
| 551 "of rounds doubles the cpu time required to calculate it. The\n" | |
| 552 "purpose of this is to periodically adjust the rounds as CPUs\n" | |
| 553 "become faster. The currently enforced minimum number of\n" | |
| 554 "rounds is 1000.\n" | |
| 555 "See: http://en.wikipedia.org/wiki/PBKDF2 and RFC2898"), | |
| 544 )), | 556 )), |
| 545 ("tracker", ( | 557 ("tracker", ( |
| 546 (Option, "name", "Roundup issue tracker", | 558 (Option, "name", "Roundup issue tracker", |
| 547 "A descriptive name for your roundup instance."), | 559 "A descriptive name for your roundup instance."), |
| 548 (Option, "web", NODEFAULT, | 560 (Option, "web", NODEFAULT, |