Password Complexity, Hash Iterations and Entropy

T1Covered by 1 source · first reported by Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale at 21 May 2024, 14:56 UTC

Introduction Is it possible to safely reduce the number of SCRAM password hashing iterations from 4096 to just one? An engineer recently raised this question about our password generation to optimise CPU usage. Why? In Neon, every database is secured via a password. Verifying the...