Project

General

Profile

Bug #32572

Provide alternative FIPS/NIST approved password hashing to bcrypt

Added by Lukas Zapletal almost 2 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Zapletal
Category:
Authentication
Target version:
-
Difficulty:
Triaged:
Yes
Bugzilla link:
1958664
Pull request:
https://github.com/theforeman/foreman/pull/8517
Fixed in Releases:
3.3.0
Found in Releases:
Red Hat JIRA:

Description

Although bcrypt is considered one of the strongest password hashing algs it is not approved by FIPS/NIST. PBKDF2 on the other hand is, so let's add a third alternative alg so users can pick what they prefer.

Associated revisions

Revision add9562f (diff)
Added by Lukas Zapletal about 1 year ago

Fixes #32572 - PBKDF2 password hashing support

Signed-off-by: Lukas Zapletal <>

History

#1 Updated by The Foreman Bot almost 2 years ago

  • Assignee set to Lukas Zapletal
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/8517 added

#2 Updated by The Foreman Bot about 1 year ago

  • Fixed in Releases 3.3.0 added

#3 Updated by Lukas Zapletal about 1 year ago

  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF