Comparison

util/sasl/scram.lua @ 12128:593e823566e1

mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438 More security for less pain than switching to SCRAM-SHA-256 The XEP will likely be change to reference the RFC that will probably come from draft-ietf-kitten-password-storage once it is ready, and then we should update to follow that.
author Kim Alvefur <zash@zash.se>
date Sun, 26 Dec 2021 16:51:04 +0100
parent 12024:9184bdda22be
child 12596:78f874441e21
comparison
equal deleted inserted replaced
12127:baa7cdde69a6 12128:593e823566e1
39 Supported Channel Binding Backends 39 Supported Channel Binding Backends
40 40
41 'tls-unique' according to RFC 5929 41 'tls-unique' according to RFC 5929
42 ]] 42 ]]
43 43
44 local default_i = 4096 44 local default_i = 10000
45 45
46 local function validate_username(username, _nodeprep) 46 local function validate_username(username, _nodeprep)
47 -- check for forbidden char sequences 47 -- check for forbidden char sequences
48 for eq in username:gmatch("=(.?.?)") do 48 for eq in username:gmatch("=(.?.?)") do
49 if eq ~= "2C" and eq ~= "3D" then 49 if eq ~= "2C" and eq ~= "3D" then