Changes between Initial Version and Version 1 of Ticket #31358


Ignore:
Timestamp:
Mar 10, 2020, 5:25:37 PM (5 years ago)
Author:
Jon Moroney
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #31358 – Description

    initial v1  
    55The rational is that modern guidance suggests a 128 bit minimum on salt sizes
    66OWASP: https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Password_Storage_Cheat_Sheet.md#salting
     7Python: https://docs.python.org/3/library/hashlib.html#hashlib.pbkdf2_hmac
    78NIST: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf
    89
     10
    911In the case of NIST this is technically a hard requirement.
Back to Top