[PR #3163] [MERGED] Update KDF Configuration and processing #3236

New issue

Closed

opened 2026-03-03 09:42:02 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 09:42:02 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/dani-garcia/vaultwarden/pull/3163
Author: @BlackDex
Created: 1/24/2023
Status: ✅ Merged
Merged: 1/24/2023
Merged by: @dani-garcia

Base: main ← Head: update-kdf-config

📝 Commits (1)

2d8c8e1 Update KDF Configuration and processing

📊 Changes

6 files changed (+35 additions, -15 deletions)

View changed files

📝 .env.template (+3 -3)
📝 src/api/core/accounts.rs (+8 -3)
📝 src/api/core/emergency_access.rs (+1 -1)
📝 src/api/identity.rs (+11 -2)
📝 src/config.rs (+7 -3)
📝 src/db/models/user.rs (+5 -3)

📄 Description

Change default Password Hash KDF Storage from 100_000 to 600_000 iterations
Update Password Hash when the default iteration value is different
Validate password_iterations
Validate client-side KDF to prevent it from being set lower than 100_000

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/dani-garcia/vaultwarden/pull/3163 **Author:** [@BlackDex](https://github.com/BlackDex) **Created:** 1/24/2023 **Status:** ✅ Merged **Merged:** 1/24/2023 **Merged by:** [@dani-garcia](https://github.com/dani-garcia) **Base:** `main` ← **Head:** `update-kdf-config` --- ### 📝 Commits (1) - [`2d8c8e1`](https://github.com/dani-garcia/vaultwarden/commit/2d8c8e18f74726303f7789af9731e8a80ce05610) Update KDF Configuration and processing ### 📊 Changes **6 files changed** (+35 additions, -15 deletions) <details> <summary>View changed files</summary> 📝 `.env.template` (+3 -3) 📝 `src/api/core/accounts.rs` (+8 -3) 📝 `src/api/core/emergency_access.rs` (+1 -1) 📝 `src/api/identity.rs` (+11 -2) 📝 `src/config.rs` (+7 -3) 📝 `src/db/models/user.rs` (+5 -3) </details> ### 📄 Description - Change default Password Hash KDF Storage from 100_000 to 600_000 iterations - Update Password Hash when the default iteration value is different - Validate password_iterations - Validate client-side KDF to prevent it from being set lower than 100_000 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>