View Issue Details

IDProjectCategoryView StatusLast Update
0008264Talerlibeufin-bankpublic2024-08-28 21:31
ReporterAntoine A Assigned ToAntoine A Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritymajorReproducibilityN/A
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.13Fixed in Version0.13 
Summary0008264: Use a real password hashing method to store password
DescriptionUse argon2 with recommended config and plan an automatic migration path on login
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Relationships

related to 0009026 implementing Support memory-hard password hashing method 

Activities

Antoine A

2024-07-26 12:55

manager   ~0022856

Implemented in 4b91ab9d9fc69f3446eb46438d48bf49a650eaec using bcrypt as memory-hard password hashing algorithms require more work.

Issue History

Date ModifiedUsernameFieldChange
2024-01-24 19:37Antoine ANew Issue
2024-01-24 19:37Antoine AStatusnew => assigned
2024-01-24 19:37Antoine AAssigned To => Antoine A
2024-01-29 23:55Christian GrothoffSeverityminor => major
2024-07-26 12:26Antoine ARelationship addedrelated to 0009026
2024-07-26 12:55Antoine AStatusassigned => informing
2024-07-26 12:55Antoine AResolutionopen => fixed
2024-07-26 12:55Antoine ANote Added: 0022856
2024-07-27 22:16Christian GrothoffProduct Version => git (master)
2024-07-27 22:16Christian GrothoffFixed in Version => 0.13
2024-07-27 22:16Christian GrothoffTarget Versionpost-1.0 => 0.13
2024-08-28 21:31Christian GrothoffStatusinforming => closed