spacemeshos / smcli

Spacemesh command-line tool
https://spacemesh.io/
MIT License
8 stars 9 forks source link

Replace argon2id with PBKDF2 #17

Closed lrettig closed 1 year ago

lrettig commented 1 year ago

The tool currently uses Argon2id and contains a partial, incomplete implementation of PBKDF2. I'm double checking with research, but smapp uses the latter, as do all other blockchain projects AFAICT, so I imagine we want to do the same. See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html.