sync: Use 600,000 iterations for pbkdf2. (#3251)

Per [wikipedia](https://en.wikipedia.org/wiki/PBKDF2), "In 2023, OWASP
recommended to use 600,000 iterations for PBKDF2-HMAC-SHA256..."
This commit is contained in:
ryneeverett
2024-01-21 14:06:53 -05:00
committed by GitHub
parent 323bd23251
commit 4008069a70
9 changed files with 11 additions and 10 deletions

View File

@@ -7,7 +7,7 @@ Encryption is not used for local (on-disk) sync, but is used for all cases where
## Key Derivation
The client derives the 32-byte encryption key from the configured encryption secret using PBKDF2 with HMAC-SHA256 and 100,000 iterations.
The client derives the 32-byte encryption key from the configured encryption secret using PBKDF2 with HMAC-SHA256 and 600,000 iterations.
The salt value depends on the implementation of the protocol, as described in subsequent chapters.
## Encryption