Update default hash storage settings
authorcsteipp <csteipp@wikimedia.org>
Tue, 8 Mar 2016 18:12:16 +0000 (10:12 -0800)
committercsteipp <csteipp@wikimedia.org>
Tue, 8 Mar 2016 18:33:10 +0000 (10:33 -0800)
Update the default hash settings to align output length and hash block
size.

Bug: T127445
Change-Id: I8419ec9db28eba5868d3a9ee9542d998bfde920b

includes/DefaultSettings.php

index c04602c..4cf0c40 100644 (file)
@@ -4496,9 +4496,9 @@ $wgPasswordConfig = [
        ],
        'pbkdf2' => [
                'class' => 'Pbkdf2Password',
-               'algo' => 'sha256',
-               'cost' => '10000',
-               'length' => '128',
+               'algo' => 'sha512',
+               'cost' => '30000',
+               'length' => '64',
        ],
 ];