diff options
| author | Florian Apolloner <florian@apolloner.eu> | 2020-06-17 08:07:10 +0200 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2020-06-17 08:10:41 +0200 |
| commit | 1621f06051c94665f2edf492c10316875896e7eb (patch) | |
| tree | d3dc00b9253a1b67df7aa92456885a255e23ee03 /docs | |
| parent | faad809e09af5617f1cda579f5b031233be21cb3 (diff) | |
Fixed #30472 -- Made Argon2PasswordHasher use Argon2id.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/3.2.txt | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/docs/releases/3.2.txt b/docs/releases/3.2.txt index 11da13daba..b6db027448 100644 --- a/docs/releases/3.2.txt +++ b/docs/releases/3.2.txt @@ -50,6 +50,15 @@ Minor features * The default iteration count for the PBKDF2 password hasher is increased from 216,000 to 260,000. +* The default variant for the Argon2 password hasher is changed to Argon2id. + ``memory_cost`` and ``parallelism`` are increased to 102,400 and 8 + respectively to match the ``argon2-cffi`` defaults. + + Increasing the ``memory_cost`` pushes the required memory from 512 KB to 100 + MB. This is still rather conservative but can lead to problems in memory + constrained environments. If this is the case, the existing hasher can be + subclassed to override the defaults. + :mod:`django.contrib.contenttypes` ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |