0

Recently I've decided to publish a simple app that I am using for maintaining and storing sensible encrypted data on the cloud.

https://www.microsoft.com/store/apps/9NSGBQSJ2HD6

The hashing is done with Argon2id v1.3 (https://libsodium.gitbook.io/doc/password_hashing/default_phf). I think I'm using a reasonable and secure choice of parameters in terms of memory cost and parallelization if we consider that the app is a desktop client application. Therefore, the entire burden of the operation is client-side and it's unlikely that a user will be hashing more than a value at a time.

Nonetheless, I would like to provide some sort of "security metrics" to the users of the app in terms of performance/costs, to explain how much likely would be for somebody else to try cracking their archives. My problem is that I cannot find anything related to Argon2id.

Is there a source or a way to show some rough estimations for Argon2id?

Maarten Bodewes
  • 96,351
  • 14
  • 169
  • 323

0 Answers0