Increase iterations used by PBKDF2 per security recommendation

silverstripe / cwp-core

CWP basic compatibility module

BSD 3-Clause "New" or "Revised" License

3 stars 12 forks source link

Increase iterations used by PBKDF2 per security recommendation #77

Closed Cheddam closed 5 years ago

Cheddam commented 5 years ago

This will result in a 3x increase in compute time for generation / verification of passwords. Since authenticating a user is a fairly infrequent activity (compared to the volume of other requests), this should be an acceptable trade-off.