diff options
| author | Paul McMillan <paul.mcmillan@nebula.com> | 2013-09-19 17:39:43 +0100 |
|---|---|---|
| committer | Paul McMillan <paul.mcmillan@nebula.com> | 2013-09-19 18:02:25 +0100 |
| commit | a075e2ad0dcce65cb5cf4cb654ac8a6839db0baf (patch) | |
| tree | 5116a0aade0ddaa229de4b99e84a49f73202b37c /docs/releases | |
| parent | 59a34c43a8c3d62eaa400d48a9c26ed5400fc647 (diff) | |
Increase default PBKDF2 iterations
Increases the default PBKDF2 iterations, since computers have gotten
faster since 2011. In the future, we plan to increment by 10% per
major version.
Diffstat (limited to 'docs/releases')
| -rw-r--r-- | docs/releases/1.6.txt | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/releases/1.6.txt b/docs/releases/1.6.txt index b665d8cec5..7cded8c544 100644 --- a/docs/releases/1.6.txt +++ b/docs/releases/1.6.txt @@ -365,6 +365,13 @@ Minor features a list (except on SQLite). This has long been possible (but not officially supported) on MySQL and PostgreSQL, and is now also available on Oracle. +* The default iteration count for the PBKDF2 password hasher has been + increased by 20%. This backwards compatible change will not affect + existing passwords or users who have subclassed + `django.contrib.auth.hashers.PBKDF2PasswordHasher`` to change the + default value. + + Backwards incompatible changes in 1.6 ===================================== |
