From 903f064e87deab1b6591edd334b701a32dc47a0f Mon Sep 17 00:00:00 2001 From: Andrey Antukh Date: Mon, 4 Sep 2023 10:55:57 +0200 Subject: [PATCH] :sparkles: Decrease slightly argon2id cost for improve usability The previous values are set too high. The current value are still valid under current recomendation but improves a little bit the time of password verification. --- backend/src/app/auth.clj | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/backend/src/app/auth.clj b/backend/src/app/auth.clj index 0037e69001..5bde8aa79b 100644 --- a/backend/src/app/auth.clj +++ b/backend/src/app/auth.clj @@ -8,14 +8,13 @@ (:require [app.config :as cf] [buddy.hashers :as hashers] - [cuerdas.core :as str] - [promesa.exec :as px])) + [cuerdas.core :as str])) (def default-params {:alg :argon2id - :memory (* 32768 2) ;; 64 MiB - :iterations 7 - :parallelism (px/get-available-processors)}) + :memory 32768 ;; 32 MiB + :iterations 3 + :parallelism 2}) (defn derive-password [password]