Post #4370925
2026-08-04 04:40 UTC
@peterwilsoncc@aus.social The 64 char limit is to prevent a KDF DOS attack during authentication. Bcrypt limits input to 72 bytes for a similar reason.
Replies (1)
-
@miniBill@mastodon.uno 2026-08-04 07:13
@firstyear@infosec.exchange @peterwilsoncc@aus.social can't you just... give it a quick sha pass if it's too long?