dfinity / sdk

IC SDK: a Software Development Kit for creating and managing canister smart contracts on the ICP blockchain.
https://internetcomputer.org/developers
Apache License 2.0
167 stars 84 forks source link

chore!: enforce minimum password length #3808

Closed sesi200 closed 3 weeks ago

sesi200 commented 3 weeks ago

Description

Weak passwords can be easily cracked by attackers using brute force or dictionary attacks. This would cause the PEM files to be decrypted, making the passwords ineffective.
This PR creates a password policy that enforces a minimum length (more than 8 characters, see NIST guidelines).

Fixes FOLLOW-1579

How Has This Been Tested?

Check of new identities covered by new e2e Manually tested that pre-existing identities keep working, even if the password is too short

Checklist: