Skip to content

Set pbkdf2Encode rounds to default to 210,000#1983

Merged
valentinfernandez1 merged 7 commits intomasterfrom
tg-pbkdf2
Aug 20, 2025
Merged

Set pbkdf2Encode rounds to default to 210,000#1983
valentinfernandez1 merged 7 commits intomasterfrom
tg-pbkdf2

Conversation

@TarikGul
Copy link
Copy Markdown
Member

@TarikGul TarikGul commented Apr 13, 2025

BREAKING CHANGE

In line with https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2 - set the default rounds to 210_000.

Why 210,000?:

We pass in Sha512 for pbkdf2Js from @noble/hashes
By default pbkdf2 from @polkadot/wasm-crypto uses HMAC-SHA512.

@valentinfernandez1 valentinfernandez1 merged commit e5e6bdd into master Aug 20, 2025
4 checks passed
@valentinfernandez1 valentinfernandez1 deleted the tg-pbkdf2 branch August 20, 2025 15:55
@polkadot-js-bot
Copy link
Copy Markdown

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@polkadot-js polkadot-js locked as resolved and limited conversation to collaborators Aug 22, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants