keycloak-scim/topics/threat/password-db-compromised.adoc

10 lines
483 B
Text
Raw Normal View History

2016-05-31 22:00:59 +00:00
=== Password database compromised
{{book.project.name}} does not store passwords in raw text.
It stores a hash of them using the PBKDF2 algorithm. It actually uses
a default of 20,000 hasing iterations! This is the security community's recommended number of iterations.
This can be a rather large performance hit on your system as PBKDF2, by design, gobbles up a significant amount of CPU.
It is up to you to decide how serious you want to be to protect your password database.