Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-07 23:00:55 +03:00
Code Issues Packages Projects Releases Wiki Activity

use bcrypt as default password hashing algo

Browse Source 
argon2id has a high memory cost and, if not properly tuned, it can lead to
resource starvation.

Advanced users can still configure and use argon2id.
Passwords stored as argon2id will continue to work
This commit is contained in:
Nicola Murino
2021-04-25 09:38:33 +02:00
parent 74b51f0ad3
commit 46998252e5
10 changed files with 70 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
dataprovider/admin.go
View File

@@ -66,7 +66,7 @@ type Admin struct {
func (a *Admin) checkPassword() error {
if a.Password != "" && !strings.HasPrefix(a.Password, argonPwdPrefix) {
if config.PasswordHashingAlgo == HashingAlgoBcrypt {
if config.PasswordHashing.Algo == HashingAlgoBcrypt {
pwd, err := bcrypt.GenerateFromPassword([]byte(a.Password), config.PasswordHashing.BcryptOptions.Cost)
if err != nil {
return err