#31358: Increase default password salt size in BasePasswordHasher.
--------------------------------------+------------------------------------
     Reporter:  Jon Moroney           |                    Owner:  nobody
         Type:  Cleanup/optimization  |                   Status:  new
    Component:  Utilities             |                  Version:  master
     Severity:  Normal                |               Resolution:
     Keywords:                        |             Triage Stage:  Accepted
    Has patch:  1                     |      Needs documentation:  1
  Needs tests:  0                     |  Patch needs improvement:  1
Easy pickings:  0                     |                    UI/UX:  0
--------------------------------------+------------------------------------

Comment (by Jon Moroney):

 Ahh sorry. I read this
 > At this point I'd probably change the encode() function to...
 as this
 > At this point I'd probably change the salt() function to...

 That's what I get for not having my coffee before getting to work :(

 Replying to [comment:42 Florian Apolloner]:
 > base64 is probably something that would make sense but not really
 compatible with what we have now :/

 Certainly something for the future :)


 So, the easy next step is to change `salt` to work in terms of bits rather
 than in terms of number of characters which returns a string of some
 length.
 On the encoding function. How much flexibility is there in terms of hash
 storage? Can a given hasher define a binary encoding for instance?

-- 
Ticket URL: <https://code.djangoproject.com/ticket/31358#comment:43>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/066.c7a007e65d307403c5e98baa9ff2f422%40djangoproject.com.

Reply via email to