New answers tagged argon2
1
vote
Accepted
Memory-hard password hash in practice?
I'm surprised this has been left unanswered. I'll give it a go.
Is Balloon hashing ready for practical use?
As of 2022, I would strongly argue no.
There's no standard, no standard is planned, there ...
- 504
2
votes
Will increasing timecost , memorycost , parallelism in argon2ID increase security in general?
Yes it does increase security but slows down the login system.
1
vote
Argon2 - memory setting - lower bound?
An RFC for Argon2 has been published now, which provides several recommendations. Unfortunately, the situation is still not clear cut and seems unrealistic.
Their two generally recommended options are:...
- 504
0
votes
Argon2id creating key for cryptography, how acceptable is it to use the same salt for the same encryption operation?
I recommend using the same salt $S$ for the same password $P$ in multiple encryptions, and a single Argon2id password-to-key derivation of $(P,S)$ into a single AES key $K$. That's best, because it ...
- 125k
1
vote
Accepted
Argon2id creating key for cryptography, how acceptable is it to use the same salt for the same encryption operation?
As someone who maintains a file encryption program, I would recommend the ZIP file approach without compression for directories/subdirectories. Then you derive one key to encrypt one file, eliminating ...
- 504
Top 50 recent answers are included