latchset / kryoptic

a pkcs#11 software token written in Rust
GNU General Public License v3.0
11 stars 4 forks source link

Reduce pbkdf2 rounds? #85

Closed simo5 closed 2 months ago

simo5 commented 2 months ago

The default of using 10000 pbkdf2 rounds for the key derivation makes things very slow, and can be seen by the fact we reduce them to 1000 in tests already.

Perhaps we should just keep them at 1000 always or find a better derive function that is not as slow with comparable security.