Feasibility of Using Key Stretching in Web Applications

IMPORTANT NOTE: The data presented here is not of scientific quality. I created this page in the preliminary stages of some research into whether or not key stretching is as beneficial for web applications as it is for stand-alone apps running on the user's PC.

The testing was done on Debian 6 + Apache, serving a simple PHP script that loads one (the same) hash out of MySQL, computes the PBKDF2 password from $_GET, and compares the hash. Obviously this is not a realistic scenario.

So please do not take these graphs too seriously!