[masklinn]

Yep. You do want a limit though as you don’t want random attackers to DOS your login server by feeding megabytes you your kdf.