4 ms·
With a salt and enough iterations of PBKDF-2, even easy passwords should be reasonably difficult to crack. The problem of course is deciding what a reasonable
by lokedhs 8y ago
With a salt and enough iterations of PBKDF-2, even easy passwords should be reasonably difficult to crack.
The problem of course is deciding what a reasonable number of iterations is, but given the time it takes to decrypt my password I'd say they use quite a lot.
- maibus2 8y ago"Should" is the key word there. When Last Pass was breached in 2015, they were using only 5k iterations of PBKDF-2 to create the encryption key (but it was changed to ~100k in Feb 2018) [1]. [1] https://palant.de/2018/07/09/is-your-lastpass-data-really-safe-in-the-encrypted-online-vault/ https://palant.de/2018/07/09/is-your-lastpass-data-really-sa...