New answers tagged

1 vote
Accepted

Memory-hard password hash in practice?

I'm surprised this has been left unanswered. I'll give it a go. Is Balloon hashing ready for practical use? As of 2022, I would strongly argue no. There's no standard, no standard is planned, there ...
user avatar
2 votes

Will increasing timecost , memorycost , parallelism in argon2ID increase security in general?

Yes it does increase security but slows down the login system.
user avatar
1 vote

Argon2 - memory setting - lower bound?

An RFC for Argon2 has been published now, which provides several recommendations. Unfortunately, the situation is still not clear cut and seems unrealistic. Their two generally recommended options are:...
user avatar
0 votes

Argon2id creating key for cryptography, how acceptable is it to use the same salt for the same encryption operation?

I recommend using the same salt $S$ for the same password $P$ in multiple encryptions, and a single Argon2id password-to-key derivation of $(P,S)$ into a single AES key $K$. That's best, because it ...
user avatar
  • 125k
1 vote
Accepted

Argon2id creating key for cryptography, how acceptable is it to use the same salt for the same encryption operation?

As someone who maintains a file encryption program, I would recommend the ZIP file approach without compression for directories/subdirectories. Then you derive one key to encrypt one file, eliminating ...
user avatar

Top 50 recent answers are included