kcapi_pbkdf_iteration_count - Man Page

Calculate numbers of iterations for a PBKDF

Synopsis

uint32_t kcapi_pbkdf_iteration_count(const char * hashname, uint64_t timeshresh);

hashname

[in] kernel crypto API name of a keyed hash (e.g. hmac(sha1))

timeshresh

[in] Time duration in nanoseconds that the PBKDF operation shall at least require. If that value is 0, a default of (1<<27) nanoseconds is used.

The function measures the time the PBKDF operation takes for different round counts for the given keyed message digest type.

The result should be taken as the iteration count for a PBKDF operation.

If an error occurs with the PBKDF calculation, a value of 1<<18 is returned.

return number of iterations a PBKDF should take on this computer.

Stephan Mueller <smueller@chronox.de>

Author.

January 2024 libkcapi Manual 1.4.0 Programming Interface