prosody
593e823566e1
util/sasl/scram.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Diff

util/sasl/scram.lua @ 12128:593e823566e1

mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438 More security for less pain than switching to SCRAM-SHA-256 The XEP will likely be change to reference the RFC that will probably come from draft-ietf-kitten-password-storage once it is ready, and then we should update to follow that.
author Kim Alvefur <zash@zash.se>
date Sun, 26 Dec 2021 16:51:04 +0100
parent 12024:9184bdda22be
child 12596:78f874441e21
line wrap: on
line diff
--- a/util/sasl/scram.lua	Sun Dec 26 16:37:50 2021 +0100
+++ b/util/sasl/scram.lua	Sun Dec 26 16:51:04 2021 +0100
@@ -41,7 +41,7 @@
 'tls-unique' according to RFC 5929
 ]]
 
-local default_i = 4096
+local default_i = 10000
 
 local function validate_username(username, _nodeprep)
 	-- check for forbidden char sequences