Support pbkdf2 with SHA256 and a custom iteration count

rbCAS / casino-activerecord_authenticator

Provides mechanism to use ActiveRecord as an authenticator for CASino.

MIT License

19 stars 61 forks source link

Support pbkdf2 with SHA256 and a custom iteration count #13

Closed fire closed 10 years ago

fire commented 10 years ago

The discourse forum database uses pbkdf2-sha256 with 64000 iterations. I would like to support it.

It requires variables for the the table columns 'password_hash' and 'salt'.

luxflux commented 10 years ago

Do I understand you correctly, that you will provide a pull request for this?

pencil commented 10 years ago

We will for now not add additional hashing/salting/peppering options as the current implementation just doesn't scale. An alternative system is planned (#16).