Yubico / yubico-pam

Yubico Pluggable Authentication Module (PAM)
https://developers.yubico.com/yubico-pam
BSD 2-Clause "Simplified" License
689 stars 114 forks source link

ykpamcfg uses bare minimum (weak?) PBKDF2 iteration count #245

Open peter021 opened 1 year ago

peter021 commented 1 year ago

Yes, NIST says the iterations count should be "at least 10 000 iterations" but today many computers are faster and PBKDF2 i vulnerable (right word?) to adversaries using optimized hardware. "ykpamcfg" should use a random iterations count for each run that falls somewhere between 50 000 and 200 000 iterations.