From: Tim Düsterhus <duesterhus@woltlab.com>
Date: Mon, 14 Dec 2020 15:16:09 +0000 (+0100)
Subject: Increase `Bcrypt` cost to 12
X-Git-Tag: 5.4.0_Alpha_1~548
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=d155542f340a35f284097fb0b77840a3a13fa992;p=GitHub%2FWoltLab%2FWCF.git

Increase `Bcrypt` cost to 12

This results in ~333ms per hash on an oldish Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
 any other CPU I tested was faster than that.
---

diff --git a/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php b/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php
index 62a9e73288..416407927f 100644
--- a/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php
+++ b/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php
@@ -13,7 +13,7 @@ use wcf\system\user\authentication\password\IPasswordAlgorithm;
  */
 final class Bcrypt implements IPasswordAlgorithm {
 	private const OPTIONS = [
-		'cost' => 10,
+		'cost' => 12,
 	];
 	
 	/**