3 ms·
> requires "100,100" iterations to brute force That phrase doesn't really capture what iterations means there. How you said it makes it sound like you only hav
by TheDong 8y ago
> requires "100,100" iterations to brute force
That phrase doesn't really capture what iterations means there. How you said it makes it sound like you only have to try 100k computations to brute force a valid answer, which is certainly not true.
It's talking about key stretching / key derivation [0].
That is not 100100 iterations to brute force it, that is 100100 iterations of PBKDF2-SHA256 applied to the password you type in as the master password.
It does look like the tables are not identical. However, since lastpass's docs [1] say it's 100100 (and configurable), I'd say that's likely the accurate default value.
[0]: https://en.wikipedia.org/wiki/Key_stretching https://en.wikipedia.org/wiki/Key_stretching
[1]: https://support.logmeininc.com/lastpass/help/about-password-iterations-lp030027 https://support.logmeininc.com/lastpass/help/about-password-...
- pier25 8y agoThanks for the explanation