minus-squarefaebudo@infosec.pubtoCybersecurity@sh.itjust.works•Questions about Argon2id and authentication handling overalllinkfedilinkEnglisharrow-up2·24 days agoUse the recommemded parameters: https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-argon2-04#page-11 Also consider WebauthN/Passkeys. They are much less ressource intensive on the server but useless to an attacker when the database is leaked and as such don’t rely on slowing down the crypto operations. linkfedilink
minus-squarefaebudo@infosec.pubtoProgrammer Humor@programming.dev•Ahh yes...wrong training datalinkfedilinkarrow-up1·5 months agoWe better should’ve stayed at 640kB. linkfedilink
Use the recommemded parameters: https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-argon2-04#page-11
Also consider WebauthN/Passkeys. They are much less ressource intensive on the server but useless to an attacker when the database is leaked and as such don’t rely on slowing down the crypto operations.