mirror of
https://github.com/django/django.git
synced 2025-10-24 06:06:09 +00:00
Increase default PBKDF2 iterations
Increases the default PBKDF2 iterations, since computers have gotten faster since 2011. In the future, we plan to increment by 10% per major version.
This commit is contained in:
@@ -89,6 +89,13 @@ any time leading up to the actual release:
|
||||
key you'll use for the release, and should include patches for each issue
|
||||
being fixed.
|
||||
|
||||
#. If this is a major release, make sure the tests pass, then increase
|
||||
the default PBKDF2 iterations in
|
||||
``django.contrib.auth.hashers.PBKDF2PasswordHasher`` by about 10%
|
||||
(pick a round number). Run the tests, and update the 3 failing
|
||||
hasher tests with the new values. Make sure this gets noted in the
|
||||
release notes (see release notes on 1.6 for an example).
|
||||
|
||||
#. As the release approaches, watch Trac to make sure no release blockers
|
||||
are left for the upcoming release.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user