Facet-MUD-Project / Facet-MUD-Project/facet-spec

Consider different password hashing algorithms

Open
#3 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

The first hashing algorithm I introduced was PBKDF2. This is a good accepted standard. But nowadays there are others that may be better.

[Argon2](https://cryptobook.nakov.com/mac-and-key-derivation/argon2) for example claims to be ASIC and GPU resistant.
[BLAKE3](https://github.com/BLAKE3-team/BLAKE3) and its predecessor BLAKE2 claim to be massively faster, although I'm uncertain of its security profile.

If we adopt a spec similar to what is propose in https://github.com/Facet-MUD-Project/facetjs/issues/36 we could easily experiment with multiple different algorithms. I think this would be interesting. We could have "required" algorithms, as well as "optional" algorithms. And the implementations should be able to detect the algorithm used and encode/decode appropriately.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.