nextcloud / end_to_end_encryption_rfc

🔒 Specification for end-to-end encryption used by Nextcloud sync & mobile apps
Other
31 stars 15 forks source link

PBKDF2 iterations to 100k minimum #44

Open vsychov opened 5 years ago

vsychov commented 5 years ago

Hi,

I propose increase pbkdf2 iterations minimum to 100k, because 10k is to small value for 2019 year. Or switch to Argon2id.

For example: lastpass use 100k - https://blog.lastpass.com/2011/05/lastpass-security-notification.html/ 1password use 100k - https://support.1password.com/pbkdf2/ stablebit use 200k - https://stablebit.com/Support/CloudDrive/Manual?Section=Encryption