increase the minimum for auto rounds to 6. that was the previous low bound

for login.conf, and we don't want to go lower.

diff --git a/lib/libc/crypt/bcrypt.c b/lib/libc/crypt/bcrypt.c
index a8c1b9e..940daf2 100644 (file)
--- a/lib/libc/crypt/bcrypt.c
+++ b/lib/libc/crypt/bcrypt.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: bcrypt.c,v 1.55 2015/09/13 15:33:48 guenther Exp $    */
+/*     $OpenBSD: bcrypt.c,v 1.56 2016/06/26 21:04:08 tedu Exp $        */
 
 /*
  * Copyright (c) 2014 Ted Unangst <tedu@openbsd.org>
@@ -261,7 +261,7 @@ _bcrypt_autorounds(void)
                duration *= 2;
        }
        /* too slow? speed it up. */
-       while (r > 4 && duration > 120000) {
+       while (r > 6 && duration > 120000) {
                r -= 1;
                duration /= 2;
        }