4096 iterations of sha1 is far too low for a password-based KDF. You may consider increasing it by several orders of magnitude.
4096 iterations of sha1 is far too low for a password-based KDF. You may consider increasing it by several orders of magnitude.