From 4e5c86b8c92f7b617cf9ef40f5d1930d52924510 Mon Sep 17 00:00:00 2001
From: Mounir IDRASSI <mounir.idrassi@idrix.fr>
Date: Sat, 22 Jun 2013 19:42:33 +0200
Subject: Reduce excessive iterations count while on the same time keep very
 high security

---
 src/Common/Pkcs5.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'src/Common/Pkcs5.c')

diff --git a/src/Common/Pkcs5.c b/src/Common/Pkcs5.c
index 0fa7f713..f02364ea 100644
--- a/src/Common/Pkcs5.c
+++ b/src/Common/Pkcs5.c
@@ -630,16 +630,16 @@ int get_pkcs5_iteration_count (int pkcs5_prf_id, BOOL bBoot)
 
 #else
 	case RIPEMD160:	
-		return bBoot? 32767 : 200000; /* we multiply this number by 10 inside derive_u_ripemd160 */
+		return bBoot? 32767 : 65534; /* we multiply this number by 10 inside derive_u_ripemd160 */
 
 	case SHA512:	
-		return 1000000;			
+		return 500000;			
 
 	case SHA1:		// Deprecated/legacy		
-		return 2000000;			
+		return 1000000;			
 
 	case WHIRLPOOL:	
-		return 1000000;
+		return 500000;
 #endif
 
 	default:		
-- 
cgit v1.2.3