➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author christian.heimes
Recipients april, christian.heimes, docs@python, illia-v, rhettinger
Date 2022-01-25.08:50:50
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1643100650.3.0.749407805003.issue42982@roundup.psfhosted.org>
In-reply-to
Content 
My question from last year has not been answered yet. Is there any valid scientific research on the number of rounds or duration? I neither know nor do I understand how Django came up with the numbers. PyCA cryptography copied the numbers without questioning them.

Were does 250ms come from? 250ms at 100% CPU load sound way too costly for a website login and too fast for a password manager. For comparison Argon2's default runtime on my laptop is 50ms.
History
Date User Action Args
2022-01-25 08:50:50christian.heimessetrecipients: + christian.heimes, rhettinger, april, docs@python, illia-v
2022-01-25 08:50:50christian.heimessetmessageid: <1643100650.3.0.749407805003.issue42982@roundup.psfhosted.org>
2022-01-25 08:50:50christian.heimeslinkissue42982 messages
2022-01-25 08:50:50christian.heimescreate