openssl/openssl — pull request #119 by rfkrocktk (2014-06-03 19:58:08+00:00)
Title: Added custom PBKDF2 iteration count to PKCS8 tool.

When encrypting keys in PKCS#8 format, it's possible to specify a number of iterations which will be required for PBKDF2 derivation. Currently, the OpenSSL pkcs8 tool only allows either 1,000 or 1 iteration(s) when encrypting keys. For a one-second delay on an average computer, over 500,000 PBKDF2 iterations are required. Therefore, it's necessary to allow users to specify their own PBKDF2 iteration count with the `-iter` command-line flag.

Codebase changes are incredibly minimal and everything uses what's already present in the `pkcs8` tool.