> Now, granted, the key derivation function is PBKDF2 with 100000 iterations FWI... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

ddtaylor on March 19, 2023 | parent | context | favorite | on: Bitwarden PINs can be brute-forced

> Now, granted, the key derivation function is PBKDF2 with 100000 iterations

FWIW on a GPU using SHA1 or SHA256 this is not very much time-protection.

sneak on March 19, 2023 [–]

Someone should tell them!

https://github.com/bitwarden/jslib/issues/52

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact