Skip to content

PBKDF2 OWASP Iteration Count for SHA512 #855

@WingZer0o

Description

@WingZer0o

https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2

PBKDF2-HMAC-SHA1: 1,300,000 iterations
PBKDF2-HMAC-SHA256: 600,000 iterations
PBKDF2-HMAC-SHA512: 210,000 iterations

Correct me if I am wrong, I was looking through the code a little bit and noticed that when consuming PBKDF2 the recommended parameters is 600,000 even if you are using SHA-512?

Would this be worth implementing into the crate? I would try to take it on.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions