Software / code / prosody
Comparison
util/sasl/scram.lua @ 12128:593e823566e1
mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438
More security for less pain than switching to SCRAM-SHA-256
The XEP will likely be change to reference the RFC that will probably
come from draft-ietf-kitten-password-storage once it is ready, and then
we should update to follow that.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sun, 26 Dec 2021 16:51:04 +0100 |
| parent | 12024:9184bdda22be |
| child | 12596:78f874441e21 |
comparison
equal
deleted
inserted
replaced
| 12127:baa7cdde69a6 | 12128:593e823566e1 |
|---|---|
| 39 Supported Channel Binding Backends | 39 Supported Channel Binding Backends |
| 40 | 40 |
| 41 'tls-unique' according to RFC 5929 | 41 'tls-unique' according to RFC 5929 |
| 42 ]] | 42 ]] |
| 43 | 43 |
| 44 local default_i = 4096 | 44 local default_i = 10000 |
| 45 | 45 |
| 46 local function validate_username(username, _nodeprep) | 46 local function validate_username(username, _nodeprep) |
| 47 -- check for forbidden char sequences | 47 -- check for forbidden char sequences |
| 48 for eq in username:gmatch("=(.?.?)") do | 48 for eq in username:gmatch("=(.?.?)") do |
| 49 if eq ~= "2C" and eq ~= "3D" then | 49 if eq ~= "2C" and eq ~= "3D" then |