From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Tue, 11 Jun 2024 17:06:33 +0000 (+0000)
Subject: ITS#9827 - Use 7MB memory/5 iterations as default
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f0ab743db46d0ecc54293c0118079f8a69c3fbea;p=thirdparty%2Fopenldap.git

ITS#9827 - Use 7MB memory/5 iterations as default

This has the same protections as 19MB/2 iterations, but requires less system memory
---

diff --git a/servers/slapd/pwmods/argon2.c b/servers/slapd/pwmods/argon2.c
index a9a19ee81d..d3cccffb08 100644
--- a/servers/slapd/pwmods/argon2.c
+++ b/servers/slapd/pwmods/argon2.c
@@ -32,8 +32,8 @@
  * Use OWASP recommended values (retrieved on 2023-08-07)
  * @see https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
  */
-#define SLAPD_ARGON2_ITERATIONS 2
-#define SLAPD_ARGON2_MEMORY 19456
+#define SLAPD_ARGON2_ITERATIONS 5
+#define SLAPD_ARGON2_MEMORY 7168
 #define SLAPD_ARGON2_PARALLELISM 1
 #define SLAPD_ARGON2_SALT_LENGTH 16
 #define SLAPD_ARGON2_HASH_LENGTH 32