From a075e2ad0dcce65cb5cf4cb654ac8a6839db0baf Mon Sep 17 00:00:00 2001 From: Paul McMillan Date: Thu, 19 Sep 2013 17:39:43 +0100 Subject: Increase default PBKDF2 iterations Increases the default PBKDF2 iterations, since computers have gotten faster since 2011. In the future, we plan to increment by 10% per major version. --- docs/releases/1.6.txt | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'docs/releases') diff --git a/docs/releases/1.6.txt b/docs/releases/1.6.txt index b665d8cec5..7cded8c544 100644 --- a/docs/releases/1.6.txt +++ b/docs/releases/1.6.txt @@ -365,6 +365,13 @@ Minor features a list (except on SQLite). This has long been possible (but not officially supported) on MySQL and PostgreSQL, and is now also available on Oracle. +* The default iteration count for the PBKDF2 password hasher has been + increased by 20%. This backwards compatible change will not affect + existing passwords or users who have subclassed + `django.contrib.auth.hashers.PBKDF2PasswordHasher`` to change the + default value. + + Backwards incompatible changes in 1.6 ===================================== -- cgit v1.3