Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[VO-780] fix: Enforce stronger encryption for new password hashing #719

Merged
merged 1 commit into from
Nov 7, 2024

Conversation

cballevre
Copy link
Member

Previously, we attempted to hash the new password using the same encryption parameters as the initial password. In cases where the initial password was hashed with low kdf iterations, this led to server rejections. Thus commit fore a higher kdf iterations for new passwords to ensure compatibility with server requirements

### 🐛 Bug Fixes

* Enforce stronger encryption for new password hashing

Previously, we attempted to hash the new password using the same encryption parameters as the initial password. In cases where the initial password was hashed with low kdf iterations, this led to server rejections. Thus commit fore a higher kdf iterations for new passwords to ensure compatibility with server requirements
@cballevre cballevre changed the title fix: Enforce stronger encryption for new password hashing [VO-780] fix: Enforce stronger encryption for new password hashing Nov 7, 2024
Copy link

bundlemon bot commented Nov 7, 2024

BundleMon

Unchanged files (16)
Status Path Size Limits
vendors/settings.(hash).js
1.2MB -
app/settings.(hash).js
94.19KB -
intents/settings.(hash).js
44.79KB -
img/export-cozy-mail.(hash).svg
27.39KB -
img/import-cozy.(hash).svg
11.09KB -
app-settings.(hash).min.css
9.9KB -
img/double_authent_prez_banner.(hash).svg
4.36KB -
img/protect_data_point.(hash).svg
4.1KB -
img/niv_secu_point.(hash).svg
1.54KB -
intents-settings.(hash).min.css
1.27KB -
img/icon-bills.(hash).svg
703B -
img/icon-laptop.(hash).svg
439B -
img/icon-arrow-left.(hash).svg
414B -
img/icon-question-mark.(hash).svg
386B -
img/icon-check.(hash).svg
369B -
img/icon-phone.(hash).svg
343B -

Total files change +8B 0%

Unchanged groups (3)
Status Path Size Limits
**/*.js
1.34MB -
img/.
51.07KB -
**/*.css
41.73KB -

Final result: ✅

View report in BundleMon website ➡️


Current branch size history | Target branch size history

@cballevre cballevre merged commit 02050d1 into master Nov 7, 2024
2 checks passed
@cballevre cballevre deleted the feat/force-higher-kdf-iterations-by-default branch November 7, 2024 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants