4 ms·
I'm not a 1Password user. What's a common number of PBKDF2 rounds to have it configured for? What's the default?
by phil 13y ago
I'm not a 1Password user. What's a common number of PBKDF2 rounds to have it configured for? What's the default?
- StavrosK 13y agoMy default is generally "whatever takes about half a second on an average machine".
- marshray 13y agoThe RFC spec says 1000 is a minimum, which is what 1PW seems to have been using.
- jpgoldberg 13y agoWe use a minimum of 10000 iterations, and where available we use CCCalibratePBKDF http://blog.agilebits.com/2011/12/01/staying-ahead-with-security/ http://blog.agilebits.com/2011/12/01/staying-ahead-with-secu...
- marshray 13y agoVery nice.