3 ms·
No. Currently, PBKDF2 (which iterates HMAC-SHA1, HMAC-SHA256, etc.) typically is used with a count in the thousands. I'd recommend upgrading to follow best sta
by sarciszewski 12y ago
No. Currently, PBKDF2 (which iterates HMAC-SHA1, HMAC-SHA256, etc.) typically is used with a count in the thousands.
I'd recommend upgrading to follow best standards. If you use PHP, scrypt isn't that hard to set up.
https://scott.arciszewski.me/blog/2013/10/php-scrypt-setup https://scott.arciszewski.me/blog/2013/10/php-scrypt-setup