I'm working on a local, client-side password manager. I want to hash a master password with argon2 to store it safely in an SQLite database. This will be how a user could login and be authenticated. (Also I'm using Rust for this project, with sodiumoxide, a rust wrapper for libsodium)
I was also planning on somehow using the master password to generate encryption keys. Obviously, that's what argon2 does, and that's what will be stored in the database for the master password, but I don't want to use what's freely available in the database in case the local db file is stolen or compromised.
So, other than argon2, how else can i use the master password for encryption keys (maybe pbkdf2?), should i even do so? should i even be worried about a local db file being compromised? Thanks!