tree ebb1ff79389fece9136eab1f33ba454d87500452
parent 2bcb3151384b8c117d7b1c260a04b525cd568e0f
author Adam Langley <agl@google.com> 1533745536 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1533748176 +0000

Set PBKDF2 limit in PKCS#12 to 100M.

The previous limit was |UINT_MAX|. Windows limits to 600K, but that's
already causing issues. This seems like a balance between being
completely crazy and still large enough not to have to worry for a long
time. It's still probably too large for backend systems wanting to
process arbitrary PKCS#12, but I don't think any fixed value will
satisfy all desires.

Change-Id: I01a3f78d5f2df086f8dbc0e8bacfb95153738f55
Reviewed-on: https://boringssl-review.googlesource.com/30424
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>