geckon01/TwoFactorAuth
1
0
Fork 0
mirror of https://github.com/RobThree/TwoFactorAuth.git synced 2026-08-17 18:44:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #117 from Mattie112/patch-1

Browse Source 
Changed default secret length from 80bits to 160bits as recommended by RFC4226
This commit is contained in:
Rob Janssen
2024-04-17 20:46:47 +02:00
committed by GitHub
parent b909cb38f6 d4a5026d86
commit dfc1124f96
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/TwoFactorAuth.php
+1 -1
View File
@@ -52,7 +52,7 @@ class TwoFactorAuth
/**
* Create a new secret
*/
public function createSecret(int $bits = 80): string
public function createSecret(int $bits = 160): string
{
$secret = '';
$bytes = (int)ceil($bits / 5); // We use 5 bits of each byte (since we have a 32-character 'alphabet' / BASE32)