Skip to content

settings: Choose password hashing complexity suitable for SBCs

Sunil Mohan Adapa requested to merge sunilmohan/freedombox:argon2-complexity into master
  • Django 3.2 has a argon2 password hashing complexity unsuitable for single board computers. Choose parameters suitable for Olimex Lime2 boards.

Tests:

  • In a browser, login to a user without these changes. Notice the hash parameters in sqlite3 auth_user table. Login with the changes. Notice that the hash has been updated with latest has parameters.

  • Login in Django 2.2 and Django 3.2. Login succeeds and hash parameters are updated.

  • As measured by the browser. Notice that change in login request time with and without these changes

Signed-off-by: Sunil Mohan Adapa sunil@medhas.org

Merge request reports