Skip to content

Increase LFS token entropy for keys/deploy keys

Igor Drozdov requested to merge id-improve-lfs-token-entropy into master

What does this MR do and why?

Since fingerprint is based on the public key. Let's take more bytes from attr_encrypted_db_key_base. To have the same entropy as a secret for a user.

Related issue: https://gitlab.com/gitlab-org/gitlab/-/issues/37243

Merge request reports