Milan Broz d173514b81 Do not decrease PBKDF parameters if a user forces them. ...

If a user explicitly specifies PBKDF parameters (like iterations,
used memory of threads), do not limit them, even if it can cause
resource exhaustion.

The only limits are hard limits per the PBKDF algorithm.

The force options were mostly used for decreasing parameters,
but it should work even opposite - despite the fact it can mean
shooting yourself in the foot (OOM).

Fixes: #812

2023-04-24 13:09:34 +02:00

9.8 KiB

Raw Blame History

View Raw