Skip to content

pbkdf2: adopt OWASP recommendations#389

Merged
tarcieri merged 1 commit intomasterfrom
pbkdf2/adopt-owasp-recommendations
Mar 5, 2023
Merged

pbkdf2: adopt OWASP recommendations#389
tarcieri merged 1 commit intomasterfrom
pbkdf2/adopt-owasp-recommendations

Conversation

@tarcieri
Copy link
Copy Markdown
Member

@tarcieri tarcieri commented Mar 5, 2023

Adopts the recommended settings from:

https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

use PBKDF2 with a work factor of 600,000 or more and set with an
internal hash function of HMAC-SHA-256.

Adopts the recommended settings from:

https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

> use PBKDF2 with a work factor of 600,000 or more and set with an
> internal hash function of HMAC-SHA-256.
@tarcieri tarcieri merged commit fbfcda5 into master Mar 5, 2023
@tarcieri tarcieri deleted the pbkdf2/adopt-owasp-recommendations branch March 5, 2023 01:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant