23501 2013-10-14 19:54:22 +0000 PBKDF2 Parameter Warning? 2014-09-26 15:03:58 +0000 1 1 1 Unclassified Web Cryptography Web Cryptography API Document unspecified PC Linux RESOLVED DUPLICATE 25607 P2 normal --- 1 hhalpin sleevi ttaubert watsonm oldest_to_newest 94691 0 hhalpin 2013-10-14 19:54:22 +0000 (6) For PBKDF2, should some guidance be given as to how to choose the number of iterations? If developers set it too high it may be too slow on slow user agents. If they set it too low to accommodate all user agents it will hurt security. (Dan Boneh) --- Problem with precise numbers recognized, currently between 20,000->200,000 http://lists.w3.org/Archives/Public/public-webcrypto/2013Sep/0055.html 111939 1 watsonm 2014-09-22 17:36:37 +0000 This seems to be covered by the more general considerations in 25607. Resolve dup ? 112250 2 watsonm 2014-09-26 15:03:37 +0000 I'm marking this as a dup of 25607, since it should be addressed there. It's more of a subset than I dup, but we don't have a specific way of saying that in Bugzilla (that I'm aware of). 112251 3 watsonm 2014-09-26 15:03:58 +0000 *** This bug has been marked as a duplicate of bug 25607 ***