honeymoose/OpenSearch
1
0
Fork 0
mirror of https://github.com/honeymoose/OpenSearch.git synced 2025-03-09 14:34:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Correct documentation for number of salt generation rounds (elastic/x-pack-elasticsearch#4322)

Browse Source 
For the user cache, the crypt option rounds are actually the log2 of the number
of rounds. This commits updates the documentation to reflect this.

Original commit: elastic/x-pack-elasticsearch@d3cc2b7f29
This commit is contained in:
Lee Hinman 2018-04-09 10:59:06 -06:00 committed by GitHub
parent 11a6cd18ac
commit 218e9a57bb
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
docs/en/security/authentication/user-cache.asciidoc
View File

@ -19,13 +19,13 @@ setting the `cache_hash_algo` setting to any of the following:
| `ssha256` | | | Uses a salted `sha-256` algorithm (default).
| `md5` | | | Uses `MD5` algorithm.
| `sha1` | | | Uses `SHA1` algorithm.
| `bcrypt` | | | Uses `bcrypt` algorithm with salt generated in 10 rounds.
| `bcrypt4` | | | Uses `bcrypt` algorithm with salt generated in 4 rounds.
| `bcrypt5` | | | Uses `bcrypt` algorithm with salt generated in 5 rounds.
| `bcrypt6` | | | Uses `bcrypt` algorithm with salt generated in 6 rounds.
| `bcrypt7` | | | Uses `bcrypt` algorithm with salt generated in 7 rounds.
| `bcrypt8` | | | Uses `bcrypt` algorithm with salt generated in 8 rounds.
| `bcrypt9` | | | Uses `bcrypt` algorithm with salt generated in 9 rounds.
| `bcrypt` | | | Uses `bcrypt` algorithm with salt generated in 1024 rounds.
| `bcrypt4` | | | Uses `bcrypt` algorithm with salt generated in 16 rounds.
| `bcrypt5` | | | Uses `bcrypt` algorithm with salt generated in 32 rounds.
| `bcrypt6` | | | Uses `bcrypt` algorithm with salt generated in 64 rounds.
| `bcrypt7` | | | Uses `bcrypt` algorithm with salt generated in 128 rounds.
| `bcrypt8` | | | Uses `bcrypt` algorithm with salt generated in 256 rounds.
| `bcrypt9` | | | Uses `bcrypt` algorithm with salt generated in 512 rounds.
| `noop`,`clear_text` | | | Doesn't hash the credentials and keeps it in clear text in
memory. CAUTION: keeping clear text is considered insecure
and can be compromised at the OS level (for example through