X-Git-Url: https://git.eyrie.org/?a=blobdiff_plain;f=NEWS;h=1ce9e504f69fcc9ffb688515aa9c93e4fb4d0b48;hb=8382b3e08208394c88249dbbb76e6be523663938;hp=7c3534ca8c903da30f62f5d41baa15a686fd7b72;hpb=bf70b9e0fe3e76ba8b63e928c01475e8e761ccba;p=kerberos%2Fkrb5-strength.git

diff --git a/NEWS b/NEWS
index 7c3534c..1ce9e50 100644
--- a/NEWS
+++ b/NEWS
@@ -6,6 +6,11 @@ krb5-strength 3.2 (unreleased)
     password would be accepted without updating the history or password
     length databases.  Based on work by macrotex.
 
+    Increase hash iterations for heimdal-history by roughly a factor of
+    four to increase the time required for a password hash to about 0.1
+    seconds on modern hardware.  This will affect newly-stored history
+    entries but will not invalidate existing password history entries.
+
     Support building without CrackLib support by passing
     --without-cracklib to configure.  This makes the code a bit simpler
     and lighter if you don't intend to ever use the CrackLib support.