2.4.4 TODO

Verify that if bcrypt is used, the work factor SHOULD be as large as verification server performance will allow, typically at least 13. (C6)

Level 1
Level 2	X
Level 3	X

CWE	NIST
916	5.1.1.2