Re: [VOTE] Increasing the default BCrypt cost
| From: | Remi Collet | Date: | Fri, 22 Sep 2023 06:53:03 +0000 |
| Subject: | Re: [VOTE] Increasing the default BCrypt cost | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-121124@lists.php.net to get a copy of this message | ||
Le 21/09/2023 à 19:26, Tim Düsterhus a écrit :
Hi I just opened the vote for the "Increasing the default BCrypt cost" RFC. The RFC contains a two votes, one primary vote that requires a 2/3 majority to pass and a secondary vote deciding on the new costs with a simple majority. Voting runs 2 weeks until 2023-10-05 17:45 UTC. Please find the following resources for your references:Tested on ARM (Neoverse-N1) Cost 9: 5.175103 total (0.051751 per hash) Cost 10: 10.325875 total (0.103259 per hash) Cost 11: 20.627759 total (0.206278 per hash) Cost 12: 41.231114 total (0.412311 per hash) Cost 13: 82.437880 total (0.824379 per hash) Cost 14: 164.851835 total (1.648518 per hash) So 11 seems reasonable. Remi
RFC Text: https://wiki.php.net/rfc/bcrypt_cost_2023 Discussion Thread: https://externals.io/message/121004 Feedback by a Hashcat team member on Fediverse: https://phpc.social/@tychotithonus@infosec.exchange/111025157601179075 Best regards Tim Düsterhus