06-21-2018, 02:00 PM
Comparison after KDF doesn't sound too complex to me (except IGE mode which I don't know what it does but block-modes tend to be simple because they have to be fast). There's much more complex kernels than what you've listed (for example LUKS). Note that 256 byte output of sha1 is really alot (your sure you don't mean bits?). Since the iteration count is almost the same compared to WPA, a more accurate performance would be to use benchmark speed / 8, because WPA needs 32 byte only.