Skip to content

Security provider: separate hash creation and hash verification#2193

Open
torstentrompler wants to merge 2 commits into
releases/25.2from
features/ttr/25.2/372108_multiple_apikeys
Open

Security provider: separate hash creation and hash verification#2193
torstentrompler wants to merge 2 commits into
releases/25.2from
features/ttr/25.2/372108_multiple_apikeys

Conversation

@torstentrompler
Copy link
Copy Markdown
Member

372108

@torstentrompler torstentrompler requested a review from andibur May 12, 2026 09:57
The current implementation of the verifyPasswordHash method is costly
when comparing a password against multiple hashes, because the password
hash will be created multiple times.

If the hash creation and hash verification are separated, the hash only
needs to be created once, when comparing a password against multiple
hashes.

372108
@torstentrompler torstentrompler force-pushed the features/ttr/25.2/372108_multiple_apikeys branch from 6e7a0e8 to 373aa5d Compare May 12, 2026 15:50
@torstentrompler torstentrompler changed the title Security provider: verify password hash against multiple expected hashes Security provider: separate hash creation and hash verification May 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant