Skip to content

Conversation

@backportbot-nextcloud
Copy link

backport of #23319

The threads option for the password_hash function does not define the maximum allowed number of CPU threads to be used by the hashing algorithm but the exact number of threads that is used.

Similarly the memory_cost option for the password_hash function does not define the maximum allowed memory to be used by the hashing algorithm, but the exact amount of memory that is used by the hashing table. The minimum value is 8 KiB per thread.

The time_cost option for the password_hash function does not define the allowed time in seconds, but the number of iterations for the hash function.

If the minimum values are understood, the minimum values are used instead.

Signed-off-by: MichaIng <[email protected]>
@rullzer rullzer added the 3. to review Waiting for reviews label Dec 21, 2020
@rullzer rullzer merged commit db22392 into stable20 Dec 21, 2020
@rullzer rullzer deleted the backport/23319/stable20 branch December 21, 2020 12:32
@rullzer rullzer mentioned this pull request Jan 5, 2021
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants