IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-11 08:41:55 -06:00
Code Issues Packages Projects Releases Wiki Activity

Increase the default token key size

Browse Source 
The previous default token key size would fail in FIPS mode for the sha384
and sha512 algorithms. With the updated key size, the default will work in
all cases.

https://pagure.io/freeipa/issue/7168

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Nathaniel McCallum 2018-02-22 14:04:10 -05:00 committed by Rob Crittenden
parent c9c58f2d35
commit a01a24ce5a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ipaserver/plugins/otptoken.py
View File

@ -72,7 +72,7 @@ TOKEN_TYPES = {
}
# NOTE: For maximum compatibility, KEY_LENGTH % 5 == 0
KEY_LENGTH = 20
KEY_LENGTH = 35
class OTPTokenKey(Bytes):
"""A binary password type specified in base32."""