[1.7.x] Increased the default PBKDF2 iterations.

This commit is contained in:
Tim Graham 2015-01-03 13:36:13 -05:00
parent 0a06ae9ef3
commit 4aed731154
3 changed files with 11 additions and 6 deletions

View file

@ -11,4 +11,9 @@ Django 1.7.3 fixes several bugs in 1.7.2.
Bugfixes
========
* ...
* The default iteration count for the PBKDF2 password hasher has been
increased by 25%. This part of the normal major release process was
inadvertently omitted in 1.7. This backwards compatible change will not
affect users who have subclassed
``django.contrib.auth.hashers.PBKDF2PasswordHasher`` to change the
default value.