prosody
593e823566e1
plugins/mod_auth_internal_hashed.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Diff

plugins/mod_auth_internal_hashed.lua @ 12128:593e823566e1

mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438 More security for less pain than switching to SCRAM-SHA-256 The XEP will likely be change to reference the RFC that will probably come from draft-ietf-kitten-password-storage once it is ready, and then we should update to follow that.
author Kim Alvefur <zash@zash.se>
date Sun, 26 Dec 2021 16:51:04 +0100
parent 12127:baa7cdde69a6
child 12355:a0ff5c438e9d
line wrap: on
line diff
--- a/plugins/mod_auth_internal_hashed.lua	Sun Dec 26 16:37:50 2021 +0100
+++ b/plugins/mod_auth_internal_hashed.lua	Sun Dec 26 16:51:04 2021 +0100
@@ -28,7 +28,7 @@
 local scram_name = "scram_"..hash_name:gsub("%-","_"):lower();
 
 -- Default; can be set per-user
-local default_iteration_count = module:get_option_number("default_iteration_count", 4096);
+local default_iteration_count = module:get_option_number("default_iteration_count", 10000);
 
 -- define auth provider
 local provider = {};