Hashcat sped up cracking the 1Password Agile Keychain due, in part, to a design flaw in PBKDF2. I tell the story of the flaw, how it bit us, and our response from the defender's point of view.
Jeffrey Goldberg