[elbe-devel] [PATCH 1/2] preprocess: Only use 5000 sha512crypt round with warning

Kurt Kanzenbach kurt.kanzenbach at linutronix.de
Wed Feb 1 15:32:54 CET 2023


On Fri Jan 27 2023, Bastian Germann wrote:
> The current passlib default is > 600.000 which makes embedded systems compute
> for a long time. There were complaints about it, so compute a hash that is
> only as expensive as Debian's old default.
>
> As this is considered insecure, warn about it.
>
> Signed-off-by: Bastian Germann <bage at linutronix.de>

Reviewed-by: Kurt Kanzenbach <kurt at linutronix.de>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 873 bytes
Desc: not available
URL: <http://lists.linutronix.de/pipermail/elbe-devel/attachments/20230201/66defd6a/attachment.sig>


More information about the elbe-devel mailing list