keycloak-scim/docs/documentation/server_admin/topics/threat
Thomas Darimont e7363905fa Change password hashing defaults according to OWASP recommendations (#16629)
Changes according to the latest [OWASP cheat sheet for secure Password Storage](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2):

- Changed default password hashing algorithm from pbkdf2-sha256 to pbkdf2-sha512
- Increased number of hash iterations for pbkdf2-sha1 from 20.000 to 1.300.000
- Increased number of hash iterations for pbkdf2-sha256 from 27.500 to 600.000
- Increased number of hash iterations for pbkdf2-sha512 from 30.000 to 210.000
- Adapt PasswordHashingTest to new defaults
- The test testBenchmarkPasswordHashingConfigurations can be used to compare the different hashing configurations.
- Document changes in changes document with note on performance and how
  to keep the old behaviour.
- Log a warning at the first time when Pbkdf2PasswordHashProviderFactory is used directly

Fixes #16629

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-01-24 18:35:51 +01:00
..
admin.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
audience-limit.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
auth-sessions-limit.adoc Code certain features as upstream only (#23603) 2023-10-03 14:50:23 -04:00
brute-force.adoc Improve brute force documentation around how the effective wait time is calculated 2024-01-09 07:50:17 +00:00
clickjacking.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
compromised-codes.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
compromised-tokens.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
csrf.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
fapi-compliance.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
host.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
open-redirect.adoc Check the redirect URI is http(s) when used for a form Post (#22) 2023-06-28 17:52:48 -03:00
password-db-compromised.adoc Change password hashing defaults according to OWASP recommendations (#16629) 2024-01-24 18:35:51 +01:00
read-only-attributes.adoc Fix broken links (#24476) 2023-11-13 09:17:34 +01:00
redirect.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
scope.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
sql.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
ssl.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00