<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - FILESAVE: Very slow saving compared to 5.2.5"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=105844#c9">Comment # 9</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - FILESAVE: Very slow saving compared to 5.2.5"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=105844">bug 105844</a>
from <span class="vcard"><a class="email" href="mailto:telesto@surfxs.nl" title="Telesto <telesto@surfxs.nl>"> <span class="fn">Telesto</span></a>
</span></b>
<pre>Created <span class=""><a href="http://bugs.documentfoundation.org/attachment.cgi?id=137784" name="attach_137784" title="Bibisect log">attachment 137784</a> <a href="http://bugs.documentfoundation.org/attachment.cgi?id=137784&action=edit" title="Bibisect log">[details]</a></span>
Bibisect log
Regression introduced by:
author Michael Stahl <<a href="mailto:mstahl@redhat.com">mstahl@redhat.com</a>> 2016-11-09 17:42:46 (GMT)
committer Michael Stahl <<a href="mailto:mstahl@redhat.com">mstahl@redhat.com</a>> 2016-11-09 18:07:20
(GMT)
commit 25205d5b29d0aade0ebd7c6405a91995d02a3a7c (patch)
tree b59667a739670467f2a8a4ad524cac8640fdb100
parent 2a5bb08a2c84470a7a33547ee478d3c26f7ae159 (diff)
package: ODF: bump PBKDF2 iteration counts
Given recent elections we need to build a higher wall to keep the
government out of our documents, and we will make the government
pay for it.
These iteration counts were considered appropriate a decade ago.
<a href="http://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256">http://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256</a>
We get similar numbers on SandyBridge-E desktop and Haswell i7-4600U laptop:
* with 10k iterations ~20 msec per derivation
* with 100k iterations ~195 msec per derivation
* with 150k iterations ~290 msec per derivation
We can't go too high though because in ODF every package stream gets
its own derived key with a different salt, so a document with embedded
images may need a lot of these.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>