Fix token secret length RFC compliance
RFC 4226 states the following in section 4: R6 - The algorithm MUST use a strong shared secret. The length of the shared secret MUST be at least 128 bits. This document RECOMMENDs a shared secret length of 160 bits. Reviewed-By: Jan Cholasta <jcholast@redhat.com>
This commit is contained in:
1 parent
21ff4f920e
commit
0ca6653c29
1 file changed
+1
-1
@@ -59,7 +59,7 @@ TOKEN_TYPES = {
|
||||
}
|
||||
|
||||
# NOTE: For maximum compatibility, KEY_LENGTH % 5 == 0
|
||||
KEY_LENGTH = 10
|
||||
KEY_LENGTH = 20
|
||||
|
||||
class OTPTokenKey(Bytes):
|
||||
"""A binary password type specified in base32."""
|
||||
|
||||
Reference in new issue
Block a user