From d5934d2e4091a0c514c1963d51a2db32576657fa Mon Sep 17 00:00:00 2001 From: Asimq <38127236+Asimq@users.noreply.github.com> Date: Wed, 23 May 2018 19:45:57 +0200 Subject: [PATCH] Added the argon2 parameters to example.runtime.properties [secure password hashing] (#70) * added argon2i parameters to example.runtime.properties * fixed the style of the example.runtime.properties Resolves: https://jira.duraspace.org/browse/VIVO-1448 --- .../resources/config/example.runtime.properties | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/home/src/main/resources/config/example.runtime.properties b/home/src/main/resources/config/example.runtime.properties index 0930d08d..3a5c862e 100644 --- a/home/src/main/resources/config/example.runtime.properties +++ b/home/src/main/resources/config/example.runtime.properties @@ -34,6 +34,23 @@ Vitro.defaultNamespace = http://vivo.mydomain.edu/individual/ # rootUser.emailAddress = vivo_root@mydomain.edu + +# +# Argon2 password hashing parameters for time, memory and parallelism required to +# compute a hash. +# +# A time cost defines the amount of computation realized and therefore the execution +# time, given in a number of iterations. +# A memory cost defines the memory usage, given in kibibytes +# A parallelism degree defines the number of parallel threads +# For determining the optimal values of the parameters for your setup please refer to +# the white paper section 9 +# https://github.com/P-H-C/phc-winner-argon2/blob/master/argon2-specs.pdf +# +argon2.parallelism =1 +argon2.memory = 1024 +argon2.time = 1000 + # # The basic parameters for a database connection. Change the end of the # URL to reflect your database name (if it is not "vitrodb"). Change the username