2 ms·
Hi Palant, I found your app in the comment today. So yes, LessPass was developed it independently. And yes we are working in a way to change the number of roun
by guillaume20100 10y ago
Hi Palant,
I found your app in the comment today. So yes, LessPass was developed it independently.
And yes we are working in a way to change the number of rounds of PBKDF2. https://github.com/lesspass/lesspass/issues/38 https://github.com/lesspass/lesspass/issues/38
API already evolve (https://github.com/lesspass/core/commit/70bebd5e5bcd0c9a32ac6aee05ea4586f0a8773a https://github.com/lesspass/core/commit/70bebd5e5bcd0c9a32ac...), we are updating the user interface.
- palant 10y agoI don't think that this is sufficient as long as 8192 is still the default. Personally, I don't think that exposing the number of iteration is a good idea at all - users have no way of knowing how much is enough. Frankly, it took me quite a while to find out what contemporary hardware (especially GPUs) is capable of and how many iterations should be considered safe today.
- guillaume20100 10y agoLessPass starts with 8192 iterations. I prepare the code to increase this number, I will not let users change it. We are creating an interface to change master password and then we will plan a LessPass version change (with a number of iterations changes)