Project

General

Profile

Actions
Copy link

Bug #32572

closed

Provide alternative FIPS/NIST approved password hashing to bcrypt

Added by Lukas Zapletal over 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Zapletal
Category:
Authentication
Target version:
-
Difficulty:
Triaged:
Yes
Bugzilla link:
1958664
Pull request:
https://github.com/theforeman/foreman/pull/8517
Fixed in Releases:
3.3.0
Found in Releases:
Red Hat JIRA:

Description

Although bcrypt is considered one of the strongest password hashing algs it is not approved by FIPS/NIST. PBKDF2 on the other hand is, so let's add a third alternative alg so users can pick what they prefer.

Actions
Copy link

Also available in: Atom PDF