I'm still curious about how NLNico's php code gave the right answer, if it's using openssl which has a 32 bit iteration counter? I guess I'll need to take a look at the php source code later. Anyway, the results are definitely right as my javascript check finally terminated (after 14 hours) which confirms it.

I started working on: https://www.pevpot.com/verify but it's not quite working yet. I'll finish it off tomorrow


Very generous gesture, and nicely done =)