Comment by voidmain

That is why you don't use SHA-256 (or other plain hash function, which is designed to be fast) as a password KDF (which needs to be slow).