X-Git-Url: https://git.eyrie.org/?a=blobdiff_plain;f=NEWS;fp=NEWS;h=4c7408ea7036d0bf7ac9bedba4f0a253396d82b2;hb=3b049d1829b326f817b1bdde74965fe96bc4139c;hp=71924d02c9e330ac12eb92a9f6d0dcda0aecebb4;hpb=45c90a3a7172bca2f1e232e772f2e8ff12d2d19a;p=kerberos%2Fkrb5-strength.git

diff --git a/NEWS b/NEWS
index 71924d0..4c7408e 100644
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,13 @@ krb5-strength 3.3 (unreleased)
     heimdal-history now requires the Perl modules Const::Fast and
     JSON::MaybeXS instead of Readonly and JSON.
 
-    Explicitly erase the copy of the password made in the Heimdal plugin.
+    Increase hash iterations for heimdal-history by about 10% to maintain
+    the time required for a password hash at about 0.1 seconds on not
+    horribly modern hardware.  This will affect newly-stored history
+    entries but will not invalidate existing password history entries.
+
+    Explicitly erase the copy of the password made in the Heimdal plugin
+    before freeing memory.
 
     Add a spec file for building RPMs, contributed by Daria Phoebe
     Brashear.