Tech Challenge

A Node.js service hashes passwords with the call below. During a hardening review the team raises the bcrypt cost from 10 to 12 and asks how much slower each hash (and therefore each attacker guess against a stolen database) becomes. What is the correct answer?

const bcrypt = require('bcrypt');

// before: const hash = await bcrypt.hash(password, 10);
const hash = await bcrypt.hash(password, 12);