fix(proxy): use 128-bit GCM tag and salt for password.link encryption

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

litellm/proxy/management_helpers/password_link_share.py

@@ -14,8 +14,8 @@ _PASSWORD_PART_LENGTH = 18
 _PBKDF2_ITERATIONS = 10000
 _DERIVED_KEY_BYTES = 32
 _GCM_IV_BYTES = 16
-_GCM_SALT_BYTES = 8
-_GCM_TAG_BYTES = 8
+_GCM_SALT_BYTES = 16
+_GCM_TAG_BYTES = 16
 _KEY_SIZE_BITS = 256
 _PART_ALPHABET = string.ascii_letters + string.digits
 _DEFAULT_API_BASE = "https://password.link"

tests/test_litellm/proxy/management_helpers/test_password_link_share.py

@@ -89,7 +89,7 @@ async def test_creates_decryptable_one_time_link() -> None:
     assert parsed["mode"] == "gcm"
     assert parsed["ks"] == 256
     assert parsed["iter"] == 10000
-    assert parsed["ts"] == 64
+    assert parsed["ts"] == 128
 
 
 @pytest.mark.asyncio