Increase bcrypt rounds to 12 (#48494)

laravel · Sep 22, 2023 · 1b88b16 · 1b88b16
1 parent 165252b
commit 1b88b16
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/src/Illuminate/Hashing/BcryptHasher.php b/src/Illuminate/Hashing/BcryptHasher.php
@@ -12,7 +12,7 @@ class BcryptHasher extends AbstractHasher implements HasherContract
      *
      * @var int
      */
-    protected $rounds = 10;
+    protected $rounds = 12;
 
     /**
      * Indicates whether to perform an algorithm check.

diff --git a/tests/Hashing/HasherTest.php b/tests/Hashing/HasherTest.php
@@ -54,6 +54,7 @@ public function testBasicBcryptHashing()
         $this->assertFalse($hasher->needsRehash($value));
         $this->assertTrue($hasher->needsRehash($value, ['rounds' => 1]));
         $this->assertSame('bcrypt', password_get_info($value)['algoName']);
+        $this->assertGreaterThanOrEqual(12, password_get_info($value)['options']['cost']);
         $this->assertTrue($this->hashManager->isHashed($value));
     }