Actions
Improvements #13041
closed
MV
RM
Change bcrypt iterations according to ASVS standards
Improvements #13041:
Change bcrypt iterations according to ASVS standards
Start date:
09/13/2024
Due date:
% Done:
100%
Estimated time:
Description
The ASVS indicates that a minimum of 10 iterations ought to be used.
This is the absolutely minimum currently, and we should probably already ensure we use more iterations than this.
The BCryptTest can be extended, such that it loops over a number of iterations (say [5,15]). We can take a sweet spot as the new default there (as indicated with a minimum of 10).
RM Updated by Romain Mardulyn about 2 years ago
- Status changed from New to InProgress
RM Updated by Romain Mardulyn about 2 years ago
- Status changed from InProgress to Review
RM Updated by Romain Mardulyn about 2 years ago
- Assignee deleted (
Romain Mardulyn)
MV Updated by Matthias Van Ceulebroeck almost 2 years ago
- Target version changed from 4.11.2 to 4.11.1
MV Updated by Matthias Van Ceulebroeck almost 2 years ago
- Status changed from Review to Implemented @Emweb
- Assignee set to Romain Mardulyn
- % Done changed from 0 to 100
MV Updated by Matthias Van Ceulebroeck almost 2 years ago
- Status changed from Implemented @Emweb to Implemented @Test
MV Updated by Matthias Van Ceulebroeck almost 2 years ago
- Status changed from Implemented @Test to Closed
Actions