fix(password-hash): Update PBKDF2 iteration count to more closely ali…

…gn with OWASP recommendations (#648)
nodemailer · Mar 12, 2024 · 46654da · 46654da
1 parent 5af8126
commit 46654da
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/consts.js b/lib/consts.js
@@ -43,7 +43,7 @@ module.exports = {
     DEFAULT_HASH_ALGO: 'pbkdf2', //either 'pbkdf2' or 'bcrypt'
 
     BCRYPT_ROUNDS: 11, // bcrypt.js benchmark async in a VPS: 261.192ms, do not want to take it too long
-    PDKDF2_ITERATIONS: 25000,
+    PDKDF2_ITERATIONS: 100000,
     PDKDF2_SALT_SIZE: 16,
     PDKDF2_DIGEST: 'sha256', // 'sha512', 'sha256' or 'sha1'