<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - FILESAVE: Very slow saving compared to 5.2.5"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=105844#c11">Comment # 11</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - FILESAVE: Very slow saving compared to 5.2.5"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=105844">bug 105844</a>
from <span class="vcard"><a class="email" href="mailto:jhertel+bugs.documentfoundation.org@gmail.com" title="jhertel <jhertel+bugs.documentfoundation.org@gmail.com>"> <span class="fn">jhertel</span></a>
</span></b>
<pre>If the regression is caused by a sudden extreme increase in the number of
iterations, then first of all I feel pissed off by the arrogance of just
changing that out of the blue (if it was actually known by Michael that it
would make saving noticably slower), and second of all I find it interesting
how Michael referred to
<a href="https://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256">https://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256</a>,
when the most popular and accepted answer
(<a href="https://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256#answer-3993">https://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256#answer-3993</a>)
starts by clearly stating:
"You should use the maximum number of rounds which is tolerable,
performance-wise, in your application. The number of rounds is a slowdown
factor, which you use on the basis that under normal usage conditions, such a
slowdown has *negligible impact* for you (*the user will not see it*, the extra
CPU cost does not imply buying a bigger server, and so on)."
5-7 seconds is *not* a negligible impact that the user will not see.
There could perhaps be a special way of encrypting documents for people that
are so scared about democracy (= government in all democratic countries) as
Michael seems to be, but then let that be a special option for those people to
specifially turn on, and let the rest of us have a useful program. Right now,
the current version of LibreOffice is completely useless if you want to use
password protected documents even once in a while.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>