skerkour / kerkour.com

(Ab)using technology for fun & profit. Programming, Hacking & Entrepreneurship @ https://kerkour.com
https://kerkour.com
Apache License 2.0
466 stars 64 forks source link

Blog post suggestion: Using the same/master password for file encryption/decryption #94

Open egbakou opened 5 months ago

egbakou commented 5 months ago

I always enjoyed your blog post on "How to securely encrypt a file with an insecure password in Rust (using Streaming Encryption + Argon2)". It was incredibly insightful! I asked a question about it in a previous issue.

I was wondering if you could cover another related topic in a future post. Specifically, I'm interested in learning how to use Argon2id in combination with XChaCha20Poly1305 or AES-GCM to encrypt multiple files, similar to a password manager or 2FA Token Manager.

One aspect I've always found challenging is understanding what happens when you change the master password. Do you need to decrypt all existing data and re-encrypt it with the new password?

Looking forward to your next post!