From 242be1a5c978ed1ddeb4ab3b40e0cf5b1e97b9de Mon Sep 17 00:00:00 2001
From: Jared Hobbs <jared@pyhacker.com>
Date: Mon, 10 Dec 2018 12:44:18 -0700
Subject: ignore few rounds in bcrypt kdf call

---
 paramiko/pkey.py | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/paramiko/pkey.py b/paramiko/pkey.py
index 9db4dfe7..f2447e15 100644
--- a/paramiko/pkey.py
+++ b/paramiko/pkey.py
@@ -429,7 +429,15 @@ class PKey(object):
             salt, rounds = self._uint32_cstruct_unpack(kdf_options, "su")
 
             # run bcrypt kdf to derive key and iv/nonce (32 + 16 bytes)
-            key_iv = bcrypt.kdf(b(password), b(salt), 48, rounds)
+            key_iv = bcrypt.kdf(
+                b(password),
+                b(salt),
+                48,
+                rounds,
+                # We can't control how many rounds are on disk, so no sense
+                # warning about it.
+                ignore_few_rounds=True,
+            )
             key = key_iv[:32]
             iv = key_iv[32:]
 
-- 
cgit v1.2.3