veracrypt / VeraCrypt

Disk encryption with strong security based on TrueCrypt
https://www.veracrypt.fr
Other
6.47k stars 927 forks source link

Replace PBKDF2 with Argon2 #1141

Open DLL125 opened 1 year ago

DLL125 commented 1 year ago

Hello @idrassi

Would it be possible to replace PBKDF2 with the more secure argon2 (I suppose Argon2id would be the best in this case)

I know you've answered this question a few years ago however I suppose things have happend since then especially since LUKS2 has implemented argon2.

I would also like to ask what some of the long standing issues are that needs to be adressed in the 1.26 series? Thanks

wendig0x commented 1 year ago

This is easy to do for containers. For system encryption it is quite a challenge.

wowquester commented 12 months ago

Just the container version would be a great leap. Please consider it.

Thanks for your work! Keep it up.

Searinox commented 3 months ago

What's the problem just implementing this for containers and not system encryption?

wendig0x commented 3 months ago

To do it right, we need to migrate all the cryptography to Botan, that's a lot of work and testing