30 seconds for entering 2nd factor.
keys now use AES with CFB mode