pub const DEFAULT_MAX_SCRAM_ITERATIONS: u32 = 1_000_000;Expand description
Default highest accepted PBKDF2 iteration count.
The server chooses this value and it is pure CPU work on the client, so an
unbounded count is a denial of service (a u32::MAX count would keep a
runtime thread busy for minutes). PostgreSQL itself uses 4096 by default;
1,000,000 is ~244x that. It can be overridden per connection with
Config::max_scram_iterations / the max_scram_iterations URL parameter.
See also MAX_SALT_LEN and MAX_SERVER_FIRST_LEN.