Facet-MUD-Project / Facet-MUD-Project/facet-spec
Consider different password hashing algorithms
- Dominant language
- No language data
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
The first hashing algorithm I introduced was PBKDF2. This is a good accepted standard. But nowadays there are others that may be better.
[Argon2](https://cryptobook.nakov.com/mac-and-key-derivation/argon2) for example claims to be ASIC and GPU resistant.
[BLAKE3](https://github.com/BLAKE3-team/BLAKE3) and its predecessor BLAKE2 claim to be massively faster, although I'm uncertain of its security profile.
If we adopt a spec similar to what is propose in https://github.com/Facet-MUD-Project/facetjs/issues/36 we could easily experiment with multiple different algorithms. I think this would be interesting. We could have "required" algorithms, as well as "optional" algorithms. And the implementations should be able to detect the algorithm used and encode/decode appropriately.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.