Files
opencloud/changelog/unreleased/change-hashing-algorithm.md
David Christofas 7115b6f661 change hashing algorithm from SHA-512 to bcrypt
Even though SHA-512 is currently considered a secure algorithm it is not the best choice for password hashing. As this change introduces a breaking change it is beast to introduce it as early as possible to prevent us from having to implement a migration strategy

Signed-off-by: David Christofas <dchristofas@owncloud.com>
2020-11-11 10:26:33 +05:45

292 B

Change: Use bcrypt to hash the user passwords

Change the hashing algorithm from SHA-512 to bcrypt since the latter is better suitable for password hashing. This is a breaking change. Existing deployments need to regenerate the accounts folder.

https://github.com/owncloud/ocis/issues/510