Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replaced bcrypt.GenerateFromPassword for pdkdf2 module #317

Closed
wants to merge 5 commits into from

Conversation

bizk
Copy link

@bizk bizk commented Feb 24, 2023

Description

Closes: #3129

Replaces bcrypt.GenerateFromPassword() function to pdkdf2 for keys derivation.

Implementation details:

  • Defined 10 iteration steps (cost variable) instead of 2, the minimum cost allowed by bcrypt is 4, if the desired number of cost iterations is lower (or greater), it defines it as default=10 .
  • Used SHA-256 as hashing algorithm.
  • Defined derivated key size to 24 bytes

Author Checklist

All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.

I have...

  • [*] included the correct type prefix in the PR title
  • added ! to the type prefix if API or client breaking change
  • targeted the correct branch (see PR Targeting)
  • [*] provided a link to the relevant issue or specification
  • followed the guidelines for building modules
  • [*] included the necessary unit and integration tests
  • added a changelog entry to CHANGELOG.md
  • included comments for documenting Go code
  • updated the relevant documentation or specification
  • reviewed "Files changed" and left comments if necessary
  • confirmed all CI checks have passed

Reviewers Checklist

All items are required. Please add a note if the item is not applicable and please add
your handle next to the items reviewed if you only reviewed selected items.

I have...

  • confirmed the correct type prefix in the PR title
  • confirmed ! in the type prefix if API or client breaking change
  • confirmed all author checklist items have been addressed
  • reviewed state machine logic
  • reviewed API design and naming
  • reviewed documentation is accurate
  • reviewed tests and test coverage
  • manually tested (if applicable)

🔗 zboto Link

@bizk bizk self-assigned this Feb 24, 2023
@bizk bizk closed this Mar 1, 2023
@bizk bizk deleted the feat/bcrypt-api-to-pbkdf2 branch March 1, 2023 16:45
@bizk bizk restored the feat/bcrypt-api-to-pbkdf2 branch March 1, 2023 16:45
@bizk bizk deleted the feat/bcrypt-api-to-pbkdf2 branch May 22, 2023 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant