News for hackers. Stuff that matters.

A comment on 1Password GPU brute-force with 3M hash/s.

Re:1Password GPU brute-force with 3M hash/s by phil on Tuesday April 16, 2013 @08:15PM (#5561772)
I'm not a 1Password user. What's a common number of PBKDF2 rounds to have it configured for? What's the default?
[ Parent | on HN ]
Re:1Password GPU brute-force with 3M hash/s by StavrosK on Tuesday April 16, 2013 @09:19PM (#5562010)
My default is generally "whatever takes about half a second on an average machine".
[ Parent | on HN ]
Re:1Password GPU brute-force with 3M hash/s by marshray on Wednesday April 17, 2013 @12:17AM (#5562661)
The RFC spec says 1000 is a minimum, which is what 1PW seems to have been using.
[ Parent | on HN ]
Re:1Password GPU brute-force with 3M hash/s by jpgoldberg on Wednesday April 17, 2013 @09:21PM (#5568413)
We use a minimum of 10000 iterations, and where available we use CCCalibratePBKDF

http://blog.agilebits.com/2011/12/01/staying-ahead-with-secu...

[ Parent | on HN ]
Re:1Password GPU brute-force with 3M hash/s by marshray on Friday April 19, 2013 @02:46PM (#5578086)
Very nice.
[ Parent | on HN ]