Increase `Bcrypt` cost to 12
authorTim Düsterhus <duesterhus@woltlab.com>
Mon, 14 Dec 2020 15:16:09 +0000 (16:16 +0100)
committerGitHub <noreply@github.com>
Mon, 14 Dec 2020 15:16:09 +0000 (16:16 +0100)
This results in ~333ms per hash on an oldish Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
 any other CPU I tested was faster than that.

wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php

index 62a9e732888f5cc478d6e2d6f2753dbe3cbb6e00..416407927fe962bb7b3ac4b31896a3bdb9af6643 100644 (file)
@@ -13,7 +13,7 @@ use wcf\system\user\authentication\password\IPasswordAlgorithm;
  */
 final class Bcrypt implements IPasswordAlgorithm {
        private const OPTIONS = [
-               'cost' => 10,
+               'cost' => 12,
        ];
        
        /**