How many iterations does the scram-sha-256 setting use in PostgreSQL 10?
问题 How many iterations does the scram-sha-256 setting use in PostgreSQL 10? The docs just say Setting this parameter to scram-sha-256 will encrypt the password with SCRAM-SHA-256. The build log reads. Add SCRAM-SHA-256 support for password negotiation and storage (Michael Paquier, Heikki Linnakangas) This proves better security than the existing md5 negotiation and storage method. 回答1: It's a compile-time variable in scram-common.h known as SCRAM_ITERATIONS_DEFAULT. Currently it's set to 4096.