mirror of
https://github.com/NLnetLabs/krill.git
synced 2026-09-20 08:27:49 +02:00
* Encrypt session state using ChaCha20-Poly1305 instead of AES-GCM. * Replace config file users login use of insecure unsalted SHA2 password hashing with secure scrypt salted password hashing. * Log the start of the request before determining the actor. * Allow sufficient time for password hashing delays during login with config file user based tests.. * Synced with Lagosta commit b49f23de.