diff --git a/typo3/sysext/core/Classes/Crypto/PasswordHashing/AbstractArgon2PasswordHash.php b/typo3/sysext/core/Classes/Crypto/PasswordHashing/AbstractArgon2PasswordHash.php index 9475c159c366784074bffbd90419426befff5b55..36d3cd739a1cc5f1931cadb94b5b8121bbb0b2eb 100644 --- a/typo3/sysext/core/Classes/Crypto/PasswordHashing/AbstractArgon2PasswordHash.php +++ b/typo3/sysext/core/Classes/Crypto/PasswordHashing/AbstractArgon2PasswordHash.php @@ -25,12 +25,14 @@ abstract class AbstractArgon2PasswordHash implements PasswordHashInterface, Argo * We raise that significantly by default. At the time of this writing, with the options * below, password_verify() needs about 130ms on an I7 6820 on 2 CPU's (argon2i). * + * We are not raising the amount of threads used, as that might lead to problems on various + * systems - see #90612 + * * @var array */ protected $options = [ 'memory_cost' => 65536, 'time_cost' => 16, - 'threads' => 2 ]; /** diff --git a/typo3/sysext/core/Tests/Unit/Authentication/AuthenticationServiceTest.php b/typo3/sysext/core/Tests/Unit/Authentication/AuthenticationServiceTest.php index 7a27c3df798db122348f3904c4bc0075228a988e..1be28fe6e165d30a595a4b1f809370aa1fb73101 100644 --- a/typo3/sysext/core/Tests/Unit/Authentication/AuthenticationServiceTest.php +++ b/typo3/sysext/core/Tests/Unit/Authentication/AuthenticationServiceTest.php @@ -193,7 +193,7 @@ class AuthenticationServiceTest extends UnitTestCase ); $dbUser = [ // an argon2i hash of 'myPassword' - 'password' => '$argon2i$v=19$m=65536,t=16,p=2$LnUzc3ZISWJwQWlSbmpkYw$qD1sRsJFzkUmjcEaKzDeg6LtflwdTpo49VbH3tMeMXU', + 'password' => '$argon2i$v=19$m=65536,t=16,p=1$eGpyelFZbkpRdXN3QVhsUA$rd4abz2fcuksGu3b3fipglQZtHbIy+M3XoIS+sNVSl4', 'lockToDomain' => '' ]; self::assertSame(200, $subject->authUser($dbUser));