2 ms·
IIRC, by default the "agile" encryption scheme in office defaults to producing a key from a password with 100,000 rounds of SHA-512, with each iteration salted
by 13of40 9y ago
IIRC, by default the "agile" encryption scheme in office defaults to producing a key from a password with 100,000 rounds of SHA-512, with each iteration salted with an incrementing integer to prevent loops. It takes about 800ms to compute one key on a newish machine.
- btown 9y agoThis is really interesting! https://msdn.microsoft.com/en-us/library/dd924776(v=office.12).aspx https://msdn.microsoft.com/en-us/library/dd924776(v=office.1... seems to be the spec for this. Though I wonder if any vulnerabilities to this type of password stretching scheme have been discovered in the years since.
- blattimwind 9y agoThat's pretty much just PBKDF1.