diff options
| author | lloyd <[email protected]> | 2010-06-15 20:15:52 +0000 |
|---|---|---|
| committer | lloyd <[email protected]> | 2010-06-15 20:15:52 +0000 |
| commit | 72f7d1292bf9a38013e9f69a7db4fa262064795c (patch) | |
| tree | 0f168cf718ef85a334faacb1bfc4bbbd66a97dd8 /doc/log.txt | |
| parent | 6565cf0df1ed88a818aecf6de7635531e05c0871 (diff) | |
Increase the iteration count and salt size used for encrypted
private keys.
For the older PBES1, we can only increase the iteration
count (from 2048 to 10000); the salt is fixed by the standard to
64 bits. This is probably OK, since PBES1 is also limited to
(at best) 64-bit encryption keys and thus is pretty unsafe
anyway.
For PBES2, increase the iteration count (also 2048 to 10000) and
increase the size of the salt from 64 bits to 96 bits.
This will only affect keys which are encrypted by a version after
this revision.
Diffstat (limited to 'doc/log.txt')
| -rw-r--r-- | doc/log.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/doc/log.txt b/doc/log.txt index 87d40ab7c..76ee9dae8 100644 --- a/doc/log.txt +++ b/doc/log.txt @@ -1,5 +1,6 @@ * 1.9.9-dev, ????-??-?? + - Increase default iteration counts for private key encryption * 1.9.8, 2010-06-14 - Add support for wide multiplications on 64-bit Windows |