diff options
| author | ReAnzu <anzu@reanzu.com> | 2018-02-24 23:45:00 -0600 |
|---|---|---|
| committer | rr- <rr-@sakuya.pl> | 2018-03-08 23:40:47 +0100 |
| commit | 3f52aceca44bc52e0c8654f46c66073320109ae9 (patch) | |
| tree | 8eb921ff35b1241f3eafef97db45c6e495f37338 /server/requirements.txt | |
| parent | 7519e071e79a2cf51e41e35fce030749c71fc0cf (diff) | |
server/users: harden password hashes
- Changed password setup to use libsodium and argon2id (regular SHA256
hashing for passwords is inadequate as modern GPU's can hash generate
billions of hashes per second).
- Added code to auto migrate old passwords to the new password_hash if
the existing password_hash matches either of the legacy password
generation schemes (SHA1 or SHA256).
- Added migration to support new password_hash format length
- Added column password_revision. This field will default to 0, which
all passwords will have till they're updated. After that each password
hash method has a revision.
Diffstat (limited to 'server/requirements.txt')
| -rw-r--r-- | server/requirements.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/server/requirements.txt b/server/requirements.txt index 2cd15ec..7cc4786 100644 --- a/server/requirements.txt +++ b/server/requirements.txt @@ -11,3 +11,4 @@ scipy>=0.18.1 elasticsearch>=5.0.0 elasticsearch-dsl>=5.0.0 scikit-image>=0.12 +pynacl>=1.2.1
\ No newline at end of file |