From 654d71cbbc3f92a1d76d6eb839faec78f4b1f35e Mon Sep 17 00:00:00 2001 From: Matt Portune <59324545+mportune-bw@users.noreply.github.com> Date: Sat, 13 Mar 2021 12:40:41 -0500 Subject: [PATCH] use hardcoded kdfiterations for send passwords (#1315) --- src/Core/Services/SendService.cs | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/Core/Services/SendService.cs b/src/Core/Services/SendService.cs index 6f04c8e15..af9c586f3 100644 --- a/src/Core/Services/SendService.cs +++ b/src/Core/Services/SendService.cs @@ -102,9 +102,8 @@ namespace Bit.Core.Services if (password != null) { - var kdfIterations = await _userService.GetKdfIterationsAsync() ?? 100000; var passwordHash = await _cryptoFunctionService.Pbkdf2Async(password, model.Key, - CryptoHashAlgorithm.Sha256, kdfIterations); + CryptoHashAlgorithm.Sha256, 100000); send.Password = Convert.ToBase64String(passwordHash); }