alexesmet / localpost-server

Web messenger application written on Rust. Optimized, fast, basic, works with or without JavaScript!
2 stars 2 forks source link

Switch to Argon2 for password hashing #6

Open Logarithmus opened 3 years ago

Logarithmus commented 3 years ago

It turns out that BLAKE3 isn't a good choice for password hashing, since it's too fast and thus makes brute-forcing much easier. https://github.com/BLAKE3-team/BLAKE3 I suggest using Argon2: https://lib.rs/crates/argonautica