Embed Notice
HTML Code
Corresponding Notice
- Embed this notice@sjw @lanodan
> Not as good as argon2 but still more than enough
no. it is not. at this point typical pbkdf2 (ie spec'd as -HMAC-SHA256 or similar) needs well over 1 million iterations to be worthwhile and even then it *still* isn't memory hard (ex the ETH algo) let alone difficult for a GPU to execute (ex XMR). argon2 in mixed mode (ie Argon2id) is your best bet for a default but honestly if it actually matters JUST USE KEY BASED AUTH OR A PASSWORD MANAGER IT'S 2022 AAAAAAHHHHHHH :not_like_this: