keycloak-scim/docs/documentation/upgrading/topics/keycloak
Thomas Darimont e7363905fa Change password hashing defaults according to OWASP recommendations (#16629)
Changes according to the latest [OWASP cheat sheet for secure Password Storage](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2):

- Changed default password hashing algorithm from pbkdf2-sha256 to pbkdf2-sha512
- Increased number of hash iterations for pbkdf2-sha1 from 20.000 to 1.300.000
- Increased number of hash iterations for pbkdf2-sha256 from 27.500 to 600.000
- Increased number of hash iterations for pbkdf2-sha512 from 30.000 to 210.000
- Adapt PasswordHashingTest to new defaults
- The test testBenchmarkPasswordHashingConfigurations can be used to compare the different hashing configurations.
- Document changes in changes document with note on performance and how
  to keep the old behaviour.
- Log a warning at the first time when Pbkdf2PasswordHashProviderFactory is used directly

Fixes #16629

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-01-24 18:35:51 +01:00
..
changes-16_0_0.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
changes-17_0_0.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
changes-18_0_0.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
changes-19_0_0.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
changes-19_0_2.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
changes-20_0_0.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
changes-21_0_0.adoc Fix links in docs (#21585) 2023-07-11 11:04:46 +00:00
changes-21_0_2.adoc Fix missing migration when reading TERMS_AND_CONDITIONS required action in legacy store 2023-03-29 16:43:01 +02:00
changes-21_1_0.adoc Update release notes for 21.1 (#19718) 2023-04-14 16:04:44 +02:00
changes-22_0_0.adoc Enable 22 migration docs 2023-07-12 13:27:40 +02:00
changes-22_0_2.adoc Move email validation change docs to migration guide of 22.0.3 2023-09-11 21:03:34 +02:00
changes-22_0_4.adoc Move email validation change docs to migration guide of 22.0.4 2023-09-13 08:39:30 +02:00
changes-23_0_0.adoc fix: do not split on space for option errors (#25876) 2024-01-05 13:01:17 +01:00
changes-23_0_2.adoc doc: adding a note about removing the (#25436) 2023-12-08 17:47:33 +01:00
changes-23_0_4.adoc Incorrect version of the fix in release notes (#25661) 2023-12-18 11:56:58 +01:00
changes-23_0_5.adoc Sanitize logs in JBossLoggingEventListenerProvider 2024-01-10 16:50:27 +01:00
changes-24_0_0.adoc Change password hashing defaults according to OWASP recommendations (#16629) 2024-01-24 18:35:51 +01:00
changes.adoc Remove Jetty 9.4 adapters (#26261) 2024-01-24 11:17:29 +01:00
intro.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
upgrading.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00