keycloak-scim/docs/documentation/server_admin/topics
Thomas Darimont e7363905fa Change password hashing defaults according to OWASP recommendations (#16629)
Changes according to the latest [OWASP cheat sheet for secure Password Storage](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2):

- Changed default password hashing algorithm from pbkdf2-sha256 to pbkdf2-sha512
- Increased number of hash iterations for pbkdf2-sha1 from 20.000 to 1.300.000
- Increased number of hash iterations for pbkdf2-sha256 from 27.500 to 600.000
- Increased number of hash iterations for pbkdf2-sha512 from 30.000 to 210.000
- Adapt PasswordHashingTest to new defaults
- The test testBenchmarkPasswordHashingConfigurations can be used to compare the different hashing configurations.
- Document changes in changes document with note on performance and how
  to keep the old behaviour.
- Log a warning at the first time when Pbkdf2PasswordHashProviderFactory is used directly

Fixes #16629

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-01-24 18:35:51 +01:00
..
admin-console-permissions Moving docs to new folder 2023-03-20 09:07:58 +01:00
authentication Implement Authentication Method Reference (AMR) claim from OIDC specification 2024-01-03 14:59:05 -03:00
clients Creating documentation for Lightweight access token(#25743) 2024-01-09 09:48:20 +01:00
events Data too long for column 'DETAILS_JSON' 2023-11-02 20:29:35 +01:00
identity-broker Allow automatic download of SAML certificates in the identity provider 2023-11-29 18:03:31 +01:00
login-settings Moving docs to new folder 2023-03-20 09:07:58 +01:00
overview Remove Jetty 9.4 adapters (#26261) 2024-01-24 11:17:29 +01:00
realms Minor changes to documentation 2023-11-01 22:14:11 +01:00
roles-groups Moving docs to new folder 2023-03-20 09:07:58 +01:00
sessions Deprecating the offline session preloading (#26160) 2024-01-16 09:29:01 +01:00
sso-protocols [docs] Update Docker Registry links to new locations. (#24193) 2023-10-23 08:27:36 +02:00
threat Change password hashing defaults according to OWASP recommendations (#16629) 2024-01-24 18:35:51 +01:00
user-federation feature: add option for creating a global truststore (#24473) 2023-11-30 08:57:17 +01:00
users Addressing Server Admin review comments 2023-11-13 15:48:02 +01:00
account.adoc Correct Securing Apps Guide (#24730) 2023-11-14 11:04:55 +01:00
admin-cli.adoc Remove conditionals about Linux vs. Windows (#26031) 2024-01-10 16:03:38 +01:00
admin-console-permissions.adoc Code certain features as upstream only (#23603) 2023-10-03 14:50:23 -04:00
admin-console.adoc Minor changes to documentation 2023-11-01 22:14:11 +01:00
assembly-creating-first-admin.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
assembly-managing-clients.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
assembly-managing-users.adoc Require user to agree to 'terms and conditions' during registration 2023-06-08 10:39:00 -03:00
assembly-roles-groups.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
authentication.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
events.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
identity-broker.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
License.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
login-settings.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
overview.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
realms.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
sessions.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
sso-protocols.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
templates Moving docs to new folder 2023-03-20 09:07:58 +01:00
threat.adoc Fix broken link to node.js and internal anchor 2023-11-13 12:20:54 +01:00
user-federation.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
vault.adoc Tidy up documentation around Windows/Linux usage (#23859) 2023-10-17 10:41:44 +02:00