HaugrNet / eds

Cryptographic Web Share
https://haugr.net/
Apache License 2.0
6 stars 0 forks source link

Replace PBKDF2 with Argon2 #85

Open knjensen opened 8 months ago

knjensen commented 8 months ago

According to the German BSI, using PBKDF2 is no longer considered safe. Argon2 is the preference, however there is no direct JCE support for Argon2, meaning that a third-part library must be provided instead.

Goal: Investigate the best alternative library, to make sure it works for different OS variants. Goal: Replace current usage, if an upgrade is needed, it should be done by migrating data using 2 instances.