The
provides a mechanism for encoding user passwords using the
bcrypt message digest algorithm.
This scheme contains an implementation for the user password syntax,
with a storage scheme name of "BCRYPT".
ds-cfg-bcrypt-password-storage-scheme
ds-cfg-password-storage-scheme
org.opends.server.extensions.BCryptPasswordStorageScheme
The cost parameter specifies a key expansion iteration count as a power of two.
A default value of 12 (2^12 iterations) is considered in 2016 as a reasonable
balance between responsiveness and security for regular users.
12
ds-cfg-bcrypt-cost