Software /
code /
prosody
Comparison
util/sasl/scram.lua @ 12128:593e823566e1
mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438
More security for less pain than switching to SCRAM-SHA-256
The XEP will likely be change to reference the RFC that will probably
come from draft-ietf-kitten-password-storage once it is ready, and then
we should update to follow that.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 26 Dec 2021 16:51:04 +0100 |
parent | 12024:9184bdda22be |
child | 12596:78f874441e21 |
comparison
equal
deleted
inserted
replaced
12127:baa7cdde69a6 | 12128:593e823566e1 |
---|---|
39 Supported Channel Binding Backends | 39 Supported Channel Binding Backends |
40 | 40 |
41 'tls-unique' according to RFC 5929 | 41 'tls-unique' according to RFC 5929 |
42 ]] | 42 ]] |
43 | 43 |
44 local default_i = 4096 | 44 local default_i = 10000 |
45 | 45 |
46 local function validate_username(username, _nodeprep) | 46 local function validate_username(username, _nodeprep) |
47 -- check for forbidden char sequences | 47 -- check for forbidden char sequences |
48 for eq in username:gmatch("=(.?.?)") do | 48 for eq in username:gmatch("=(.?.?)") do |
49 if eq ~= "2C" and eq ~= "3D" then | 49 if eq ~= "2C" and eq ~= "3D" then |