Re:TrueCrypt Security Assessment [pdf]
by pencilcode on Monday April 14, 2014 @12:19PM
(#7587043)
Last i saw, django uses 1000 as the iteration count for PBKDF2. So maybe that's common nowadays and needs to be reviewed. On another point, can anyone point me to an article explaining the state of the art for user passwords storage?
[ Parent
| on HN ]
OWASP do a decent job of aggregating currently accepted practice: https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet