Ceiling on the PBKDF2 rounds an envelope may ask for. The count travels in
the envelope, so a hostile file could otherwise name a billion rounds and
wedge the tab for hours before failing. Ten million is roughly ten seconds
on a laptop, far above any honest setting, far below a denial of service.
Ceiling on the PBKDF2 rounds an envelope may ask for. The count travels in the envelope, so a hostile file could otherwise name a billion rounds and wedge the tab for hours before failing. Ten million is roughly ten seconds on a laptop, far above any honest setting, far below a denial of service.