Timeline for Does NIST really recommend PBKDF2 for password hashing?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 23, 2017 at 17:17 | history | edited | eckes | CC BY-SA 3.0 |
added 51 characters in body
|
| Mar 19, 2017 at 18:43 | history | edited | eckes | CC BY-SA 3.0 |
added 68 characters in body
|
| Mar 19, 2017 at 15:17 | comment | added | Scovetta | That 10,000 iteration number should be based on the amount of time you're willing to wait during legitimate auth flows. Figure like 500ms of processing time in your environment. So as systems get faster, that number should go up, but you need to have agility built in at that point. 10,000 is probably an absolute minimum, but if you actually implement this, do testing first. | |
| Mar 19, 2017 at 10:37 | history | answered | eckes | CC BY-SA 3.0 |