scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-28 06:23:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 94

chore(auth): document the PBKDF2 iteration constants' provenance

Browse source
This commit is contained in:
yucheng-berri 2026-10-14 22:27:14 -07:00
parent 688c574dee
commit 2c31968bf3
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
litellm/proxy/utils.py
View file

@ -7156,7 +7156,12 @@ def hash_token(token: str):
return hashed_token
# OWASP Password Storage Cheat Sheet recommendation
# for PBKDF2-HMAC-SHA256.
PBKDF2_ITERATIONS: Final = 600_000
# Defensive upper bound against excessive CPU usage from
# malformed or untrusted stored iteration counts.
PBKDF2_MAX_ITERATIONS: Final = 10_000_000
PBKDF2_PREFIX: Final = "pbkdf2:sha256:"
SCRYPT_PREFIX: Final = "scrypt:"