diff options
| author | Adam Soltys <[email protected]> | 2026-08-07 22:59:05 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-08-07 23:29:24 -0700 |
| commit | 9f99bbdb765fc70373943930d543ce1cde7a5f35 (patch) | |
| tree | 9b36328df6cc860d8288e4c839a476148b472a51 /scripts | |
| parent | 01784219f83f68c7d03eb19c35f05eeaedc74487 (diff) | |
| download | coinos-server-9f99bbdb765fc70373943930d543ce1cde7a5f35.tar.gz coinos-server-9f99bbdb765fc70373943930d543ce1cde7a5f35.zip | |
auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)
Registration, password change, and admin reset all hashed at bcrypt
cost 4 (16 rounds, ~1,300 guesses/s/thread) — the single factor gating
the custodial balance and the nip49 passphrase for the stored nostr key.
Raise all three sites to cost 12, and on successful login re-hash any
legacy cost-4 hash now that we hold the verified plaintext.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions