mirror of
https://github.com/TracksApp/tracks.git
synced 2025-12-25 03:30:13 +01:00
95f0f71441
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.
This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.
[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2]
|
||
|---|---|---|
| .. | ||
| backend_controller_test.rb | ||
| contexts_controller_test.rb | ||
| data_controller_test.rb | ||
| feedlist_controller_test.rb | ||
| integrations_controller_test.rb | ||
| login_controller_test.rb | ||
| notes_controller_test.rb | ||
| preferences_controller_test.rb | ||
| projects_controller_test.rb | ||
| recurring_todos_controller_test.rb | ||
| stats_controller_test.rb | ||
| todo_container_controller_test_base.rb | ||
| todos_controller_test.rb | ||
| users_controller_test.rb | ||