Timeline for Choose Argon2i or Argon2id for secure password hashing on a website?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 26, 2020 at 0:48 | comment | added | mentallurg | @mkdir: It is hard to suggest particular article. Side channels depend mainly on the hardware the target software is running on, on the firmware in this hardware, on the operating system, on the particular patches installed or not installed. To execute a side-channel attack, usually a direct access to the hardware is required. I'd suggest you to implement hashing as a configurable function. Take any of algorithms you named, no matter if it is one of Argon kinds or scrypt or others. Go ahead. When you really see reasons to prefer some other algorithm, just replace it. | |
| Aug 25, 2020 at 9:09 | comment | added | mkdir | Thank you for your answer! I'm making a financial app, and when I searched for information about side-channel attacks and other types of attacks, I didn't find a word about websites. Everywhere we talk about cryptosystems or operating systems (for example, Windows). If you have in mind articles or guides about this, I will be grateful to you! | |
| Aug 25, 2020 at 0:53 | history | answered | mentallurg | CC BY-SA 4.0 |