PostgreSQL 16 scram_iterations controls SCRAM-SHA-256 hashing

The author explains how PostgreSQL's scram_iterations parameter determines the PBKDF2 iteration count for SCRAM-SHA-256 authentication, highlighting its role as a CPU cost paid by connecting clients and exploring security implications such as user-existence oracles and driver-side iteration caps. Open article →