4 ms·
You might want to add "with a high number of iterations or work factor," at least. PBKDF2-HMAC-SHA-256 is just as useless as 2xSHA-256 if you just do one iterat
by thirsteh 13y ago
You might want to add "with a high number of iterations or work factor," at least. PBKDF2-HMAC-SHA-256 is just as useless as 2xSHA-256 if you just do one iteration.
- rlpb 13y agoYes - this is reasonable. I'd generalise this to: "Use an accepted key derivation function, such as PBKDF2, bcrypt or scrypt, with accepted parameters". What is "accepted" changes over time, of course.