2 ms·

Note that anything is possible to parallelize for an attacker who has many different candidate values (e.g., password guesses) to try.