Comment Comment by woliveirajr If it takes 1 sec on my device and 1 year on attackersversusIf it takes 2 sec on my device and 2 years on attackersMy conclusionI will spend one second of my life for each login I do, but I'll gain 1 year of security (or the attacker will have to double his power).Perhaps 5 years to generate, 5 years to break isn't usefull (and the ratio would be terrible).But keeping the same ratio, or even making it a little worse when it makes the attacker take longer, doesn't seem bad. parent woliveirajr 10 years ago
versus
If it takes 2 sec on my device and 2 years on attackers
My conclusion
I will spend one second of my life for each login I do, but I'll gain 1 year of security (or the attacker will have to double his power).
Perhaps 5 years to generate, 5 years to break isn't usefull (and the ratio would be terrible).
But keeping the same ratio, or even making it a little worse when it makes the attacker take longer, doesn't seem bad.