`KdfLimitOptions`

`KdfLimitOptions`

Caller-supplied bound on password-based KDF work.

ts

interface KdfLimitOptions {
	readonly maxKdfIterations?: number;
}

Properties

readonly maxKdfIterations?: number — Maximum KDF iteration count accepted from the input. Higher counts fail before any derivation runs. Defaults to 2_000_000 for PBKDF2 and 100_000 for the PKCS#12 KDF, which costs more per round. In a PFX the PBES2-encrypted entries share one budget of this size and the MAC has a separate budget of this size.