Re:How did LastPass master passwords get compromised?
by md_ on Thursday December 30, 2021 @12:24PM
(#29738705)
I have not checked 1Password's math--they just come up in the results for "PBKDF2 cost of brute forcing". ;)
But yes, it matches my intuition--brute forcing human-strength keys is surprisingly cheap. (And I don't know if they're taking into account the discount if you have custom ASICs for this, defend against which is the argument made for scrypt instead.)
But yes, it matches my intuition--brute forcing human-strength keys is surprisingly cheap. (And I don't know if they're taking into account the discount if you have custom ASICs for this, defend against which is the argument made for scrypt instead.)