#5623 - Installer does not actually determine a good ratchet default despite language string saying so
0 guests and 0 members have recently viewed this.
The top 3 point earners from 30th Nov 2025 to 7th Dec 2025.
| Gabri |
|
|
|---|---|---|
| PDStig |
|
|
| Adam Edington |
|
|
There are no events at this time
CONFIG_OPTION_crypt_ratchet says "A sensible default is auto-detected at installation but should be very conservatively raised over the years...". But we don't actually set a default during installation.
This has been implemented as step 6 of the installation process (before installing the forums). A new API was added in crypt, "calculate_reasonable_ratchet".
This is for version 10 only.
Minimal: About 0.025 seconds
Low: About 0.05 seconds
Medium: About 0.1 seconds
High: About 0.25 seconds
Very high: About 1 second
This hotfix is for v11 where the Setup Wizard now has 5 security levels (from minimum to ultra high) and will calculate a cryptographic ratchet based on security level and relevant computational time.