Re: RFC: Increasing the default BCrypt cost
| From: | Niels Dossche | Date: | Thu, 07 Sep 2023 18:05:07 +0000 |
| Subject: | Re: RFC: Increasing the default BCrypt cost | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-121006@lists.php.net to get a copy of this message | ||
Hi Tim
On 07/09/2023 19:26, Tim Düsterhus wrote:
> Hi
>
> in response to the recent "PASSWORD_DEFAULT value" thread [1], I've created an
> RFC to discuss an increase of the default BCrypt costs for
>
password_hash() from the current value of 10.
>
> https://wiki.php.net/rfc/bcrypt_cost_2023
These are the kind of things that are easily forgotten.
Thank you for taking care of this!
I just noticed one small detail.
From the RFC text: "All tests were carried out using wall-power." I guess you mean
wall-time?
>
> This message is intended to officially open the discussion period for that RFC.
>
> Best regards
> Tim Düsterhus
>
> [1] https://externals.io/message/120993
>
Kind regards
Niels