Hacker News Reader

I'm not a 1Password user. What's a common number of PBKDF2 rounds to have it configured for? What's the default?

My default is generally "whatever takes about half a second on an average machine".

The RFC spec says 1000 is a minimum, which is what 1PW seems to have been using.

We use a minimum of 10000 iterations, and where available we use CCCalibratePBKDF

Very nice.