Consider switching from pbkdf to something more secure?

tyler-smith / go-bip39

The BIP39 library for Go.

MIT License

549 stars 196 forks source link

Consider switching from pbkdf to something more secure? #49

Open maurerbot opened 2 years ago

maurerbot commented 2 years ago

Today PBKDF2 is considered old-fashioned and less secure than modern KDF functions because it is not GPU or ASIC resistant.

It is recommended to use Bcrypt, Scrypt or Argon2 instead.

jtwatson commented 1 year ago

Maybe I am missing something, but isn't the use of PBKDF2 dictated by bip39? If you change that, you would no longer generate the same SEED for a given mnemonic code.