undefined | Better HN

0 pointsgliptic9y ago0 comments

What evidence do you have that your scheme is any more future proof than, say, Argon2? No, just using a bunch of different primitives is not going to guard against the kind of breaks found in bcrypt or scrypt, which aren't really breaks at all.

0 comments

3 comments · 1 top-level

marcusfrex9y ago· 2 in thread

Forgiva is not a key-derivation algorithm itself to compare with Argon2 but a combination way for various hashing and encryption algorithms along PBKDF2 "depending on master-key". So it's as much future-proof as master-key generated algorithm sequence.

And in this case which methods would you offer and prefer for future-proofing with comparison to other KDFs?

glipticOP9y ago

I would use an analysed algorithm such as Argon2 and be done with it. If you're so worried about bcrypt, why do you use PBKDF2 which is no better?

marcusfrex9y ago

Actually i am not worried about bcrypt. I just wanted to use more enterprise level approved KDF other than individual work.

But regarding criticizes probably there will be bcrypt, scrypt and argon2 implementations as options on the next release.

j / k navigate · click thread line to collapse