django

Commit Graph

Author	SHA1	Message	Date
Tim Graham	1915a7e5c5	Increased the default PBKDF2 iterations.	2016-05-20 09:19:19 -04:00
Bas Westerbaan	a5033dbc58	Refs #26033 -- Added password hasher support for Argon2 v1.3. The previous version of Argon2 uses encoded hashes of the form: $argon2d$m=8,t=1,p=1$<salt>$<data> The new version of Argon2 adds its version into the hash: $argon2d$v=19$m=8,t=1,p=1$<salt>$<data> This lets Django handle both version properly.	2016-04-25 21:17:53 -04:00
Tim Graham	92053acbb9	Fixed E128 flake8 warnings in tests/.	2016-04-08 10:12:33 -04:00
Tim Graham	1243fdf5cb	Fixed #26395 -- Skipped the CryptPasswordHasher tests on platforms with a dummy crypt module.	2016-03-22 11:22:21 -04:00
Bas Westerbaan	b4250ea04a	Fixed #26033 -- Added Argon2 password hasher.	2016-03-08 11:22:18 -05:00
Florian Apolloner	67b46ba701	Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login. This is a security fix.	2016-03-01 11:25:28 -05:00
Tim Graham	47b5a6a43c	Fixed #26187 -- Removed weak password hashers from PASSWORD_HASHERS.	2016-02-22 18:59:23 -05:00
Hasan	3d0dcd7f5a	Refs #26022 -- Used context manager version of assertRaises in tests.	2016-01-29 12:32:18 -05:00
Tim Graham	593c9eb660	Increased the default PBKDF2 iterations for the 1.10 release cycle.	2015-09-23 19:31:11 -04:00
Tim Graham	c21410aeeb	Fixed typo in "pbkdf2" test names.	2015-09-19 20:44:37 -04:00
Tim Graham	7f1168e387	Removed support for Python 3.3.	2015-06-18 08:36:50 -04:00
Tim Graham	b86abbceb9	Fixed #24115 -- Allowed bcrypt hashers to upgrade passwords on rounds change. Thanks Florian Apolloner for the review.	2015-03-30 18:52:59 -04:00
Tim Graham	2d7aca3da0	Moved contrib.auth tests out of contrib.	2015-02-11 10:19:22 -05:00

13 Commits