HUMAN VERIFICATION REQUIRED ASVS 11.4.4 Password-derived keys

The application uses approved key derivation functions with key stretching parameters when deriving secret keys from passwords. The parameters in use must balance security and performance to prevent brute-force attacks from compromising the resulting cryptographic key.