| ▲ | charcircuit 4 hours ago | |
>Let’s now assume our attacker has a really powerful machine, has gotten your salt and now will compute their own “table”. You should be using a TPM so such an attack is impossible. The TPM should be what is rate limiting the guesses. You don't need a KDF here. | ||