Vista pbkdf2 hash iterations
I am doing a little bit of research on security, and I was looking into the way Windows stores local password hashes.

From what I can tell XP used to do it like this:

    md4(name + md4( pass ) )

And since Vista, they use the xp hash, and apply an SHA algorithm for a number of times, using the lower case username as salt. Some sourcies I found say SHA1, others said SHA-256. What worries me more though, is that I can't seem to find how many iterations there are. Once (not very promising) source said 1024 times, other sources speak of tens of thousands of times.

How does this work? Is there even a set number of iterations?

Vista pbkdf2 hash iterations
===

I am doing a little bit of research on security, and I was looking into the way Windows stores local password hashes.

From what I can tell XP used to do it like this:

    md4(name + md4( pass ) )

And since Vista, they use the xp hash, and apply an SHA algorithm for a number of times, using the lower case username as salt. Some sourcies I found say SHA1, others said SHA-256. What worries me more though, is that I can't seem to find how many iterations there are. Once (not very promising) source said 1024 times, other sources speak of tens of thousands of times.

How does this work? Is there even a set number of iterations?
