From d155542f340a35f284097fb0b77840a3a13fa992 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Tim=20D=C3=BCsterhus?= Date: Mon, 14 Dec 2020 16:16:09 +0100 Subject: [PATCH] Increase `Bcrypt` cost to 12 This results in ~333ms per hash on an oldish Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz any other CPU I tested was faster than that. --- .../user/authentication/password/algorithm/Bcrypt.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php b/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php index 62a9e73288..416407927f 100644 --- a/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php +++ b/wcfsetup/install/files/lib/system/user/authentication/password/algorithm/Bcrypt.class.php @@ -13,7 +13,7 @@ use wcf\system\user\authentication\password\IPasswordAlgorithm; */ final class Bcrypt implements IPasswordAlgorithm { private const OPTIONS = [ - 'cost' => 10, + 'cost' => 12, ]; /** -- 2.20.1