Skip to content

PBKDF2 OWASP Iteration Count for SHA512 #855

@WingZer0o

Description

@WingZer0o

https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2

PBKDF2-HMAC-SHA1: 1,300,000 iterations
PBKDF2-HMAC-SHA256: 600,000 iterations
PBKDF2-HMAC-SHA512: 210,000 iterations

Correct me if I am wrong, I was looking through the code a little bit and noticed that when consuming PBKDF2 the recommended parameters is 600,000 even if you are using SHA-512?

Would this be worth implementing into the crate? I would try to take it on.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions