weavejester/crypto-password — pull request #2 by ghoseb (2014-03-26 12:17:45+00:00)
Title: Increase default iterations of PBKDF2 to 100,000.

20,000 is too low to be a sane default in 2014. According to OWASP the
rule of thumb is to tune the work-factor to make sure the process takes
around 250ms to 1s.

100,000 iterations takes around 241ms on my mid-2012 MacBook Air, so
given modern hardware 100,000 seems to be a fairly sane default.