From 8f205acea94e93a463109e08814f78c09307f2b9 Mon Sep 17 00:00:00 2001 From: SaJH Date: Sun, 12 May 2024 03:32:57 +0900 Subject: Fixed #35428 -- Increased parallelism of the ScryptPasswordHasher. --- docs/releases/5.1.txt | 3 +++ 1 file changed, 3 insertions(+) (limited to 'docs') diff --git a/docs/releases/5.1.txt b/docs/releases/5.1.txt index d60ccb9730..2def385f98 100644 --- a/docs/releases/5.1.txt +++ b/docs/releases/5.1.txt @@ -46,6 +46,9 @@ Minor features * The default iteration count for the PBKDF2 password hasher is increased from 720,000 to 870,000. +* In order to follow OWASP recommendations, the default ``parallelism`` of the + ``ScryptPasswordHasher`` is increased from 1 to 5. + * :class:`~django.contrib.auth.forms.BaseUserCreationForm` and :class:`~django.contrib.auth.forms.AdminPasswordChangeForm` now support disabling password-based authentication by setting an unusable password on -- cgit v1.3