root-gg / plik

Plik is a temporary file upload system (Wetransfer like) in Go.
https://plik.root.gg
Other
1.47k stars 168 forks source link

Fix the use of deprecated key derivation #461

Closed vepito closed 1 year ago

vepito commented 1 year ago

Use sha512 instead of sha256, faster and more secure Follow OWASP recommendation, use 120000 iterations for PBKDF2-HMAC-SHA512