[Suggestion]: Use a key derivation function about passy HOT 3 CLOSED

Brilliantly spotted, this one is rather lazily done indeed. Turns out there is already a Dart library for Argon2 at https://pub.dev/packages/dargon2, so implementation should not be of any problem.

Regarding compatibility, do not worry, I'm always doing my best to ensure as much backwards compatibility as possible with the older versions of Passy and especially their backups. In this case it would be as simple as having a few variables specify key derivation type and other key derivation properties, so that if those are missing, legacy key generation would take place.

Thank you, I will notify you once there is a fix, along with an available test build.

from passy.

Hello!
I have good news regarding Argon2 key derivation support.

Argon2 support is implemented for the main application and used for new accounts in 2a29e9c (dev branch).
It is possible to convert old accounts into Argon2 accounts (currently only available via the Change password feature)
Argon2 support for Passy CLI (and browser extension) is yet to come.
Key derivation settings are not yet implemented.

Default Argon2 parameters:

parallelism = 4
memory = 64mb (or lower, if system does not have sufficient memory)
iterations = 2

I will notify you once again when Argon2 key derivation is fully supported.

from passy.

@markozajc Argon2 support is fully implemented - ad50498, aade66d.

This will be included in the next release.
Unfortunately, there is more testing to be done and several other features are waiting to be implemented. Please wait patiently.

The fix test build artifacts for all supported platforms are available at https://github.com/GlitterWare/Passy/actions/runs/5918485720. Do note that there are no guarantees to come with builds from the dev branch as they are not as thoroughly tested, if at all, as the ones from the main branch. Thank you for your understanding.

This issue will be kept open until the next release.

from passy.