From a075e2ad0dcce65cb5cf4cb654ac8a6839db0baf Mon Sep 17 00:00:00 2001 From: Paul McMillan Date: Thu, 19 Sep 2013 17:39:43 +0100 Subject: Increase default PBKDF2 iterations Increases the default PBKDF2 iterations, since computers have gotten faster since 2011. In the future, we plan to increment by 10% per major version. --- docs/internals/howto-release-django.txt | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'docs/internals') diff --git a/docs/internals/howto-release-django.txt b/docs/internals/howto-release-django.txt index a926de27ab..03b543bd5e 100644 --- a/docs/internals/howto-release-django.txt +++ b/docs/internals/howto-release-django.txt @@ -89,6 +89,13 @@ any time leading up to the actual release: key you'll use for the release, and should include patches for each issue being fixed. +#. If this is a major release, make sure the tests pass, then increase + the default PBKDF2 iterations in + ``django.contrib.auth.hashers.PBKDF2PasswordHasher`` by about 10% + (pick a round number). Run the tests, and update the 3 failing + hasher tests with the new values. Make sure this gets noted in the + release notes (see release notes on 1.6 for an example). + #. As the release approaches, watch Trac to make sure no release blockers are left for the upcoming release. -- cgit v1.3