From: Tim Düsterhus <duesterhus@woltlab.com>
Date: Wed, 12 May 2021 10:28:42 +0000 (+0200)
Subject: Use BCrypt costs '9' for MFA backup codes
X-Git-Tag: 5.4.0_Alpha_3~44
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=0ffac9c5176ad49e9ad196597bb1d4f80ac9712e;p=GitHub%2FWoltLab%2FWCF.git

Use BCrypt costs '9' for MFA backup codes

Resolves #4206
---

diff --git a/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php b/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php
index b694839710..41e787223d 100644
--- a/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php
+++ b/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php
@@ -60,7 +60,7 @@ final class BackupMultifactorMethod implements IMultifactorMethod
 
     public function __construct()
     {
-        $this->algorithm = new Bcrypt();
+        $this->algorithm = new Bcrypt(9);
     }
 
     /**