Tags: zitadel/passwap
Tags
feat: hash validation (#77) * feat: hash validation Add the ability to validate if a hash if verifiable, within set cost parameters. BREAKING CHANGE: 1. Validate method added to the Verifier interface 2. Scrypt N parameter changed to LN, which is log2(N). As scrypt only accepts N as a power of 2, using LN directly is less error prone. LN is also the value used in the encoded hash. 3. Drop the md5 hasher. The algorithm is insecure and we don't have hashers for the other variants anyway. Adding it was more a vanity thing when the lib was created. * fix typos --------- Co-authored-by: Livio Spring <[email protected]>
feat: verifier for MD5 salted passwords (#58) * feat($rootScope): verifier for MD5 salted passwords Allow salted passwords hashed with MD5 to be verified. Accept salt as prefix or as suffix of the password. Don't allow to use as hasher. new feature * Update md5salted/md5salted.go Co-authored-by: Tim Möhlmann <[email protected]> * Update md5salted/md5salted.go Co-authored-by: Tim Möhlmann <[email protected]> * Update md5salted/md5salted_test.go Co-authored-by: Tim Möhlmann <[email protected]> * Update md5salted/md5salted_test.go Co-authored-by: Tim Möhlmann <[email protected]> * Update md5salted/md5salted_test.go Co-authored-by: Tim Möhlmann <[email protected]> --------- Co-authored-by: Tim Möhlmann <[email protected]>
chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#53) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.31.0 to 0.32.0. - [Commits](golang/crypto@v0.31.0...v0.32.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
chore(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0 (#23) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.17.0 to 0.18.0. - [Commits](golang/crypto@v0.17.0...v0.18.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
PreviousNext