Consider scrypt or some memory-intensive hash rather than pbkdf2 about raiwebwallet HOT 2 OPEN

It's almost done too :P

https://github.com/jaimehgb/RaiWebWallet/blob/master/js/custom.js#L1444
https://github.com/jaimehgb/RaiWebWallet/blob/master/wallet.php#L250

I was thinking on how to store its value, in a field near the wallet at the database or serialized with the wallet data. The problem with the first one is what happens if it fails to update the value in the database due to connection issues or whatever and the ciphered wallet with the new iteration number is stored successfully (they are independent functions, maybe putting them together will do the trick). And the problem with the second one is compatibility with old wallets, I should add a mechanism to distinguish between both formats and then decipher the packed data in one way or another (https://github.com/jaimehgb/RaiWebWallet/blob/master/Wallet.js#L1359).

from raiwebwallet.

If you're going the hard way you might want to consider argon2id instead of scrypt concerning side-channel attack resistance:

https://www.cryptolux.org/index.php/Argon2
https://tools.ietf.org/html/draft-irtf-cfrg-argon2-03#page-13

Otherwise customizable, read increased iterations should be sufficient for now.

from raiwebwallet.