3 votes

Algorithms when using client side hashing plus server side hashing

There's nothing special about PBKDF2. It can -- and should -- be replaced with more modern algorithms like Argon2 whenever possible. PBKDF2 is not resistant against brute-force attacks with GPUs and ...
Ja1024's user avatar
  • 4,259
1 vote
Accepted

Safe usage of bitaddress.org

I'm not sure you need to go to all the trouble of changing the password on your router, and disconnecting all the devices from your network, etc. Also, the bitaddress web page is designed to be run ...
mti2935's user avatar
  • 23k
1 vote

Securely storing derived key in web app and handling user identity

With regard to (1): See Need some clarification regards end-to-end encryption process for a few ideas around how to store users' private keys in a zero-knowledge web application. With regard to (2): ...
mti2935's user avatar
  • 23k
1 vote

How secure is Keychain on OS X?

The Keychain format is included in Apple's open source code, as part of darwin. The encryption within the Keychain format uses PBKDF2-SHA1 3DES, and is supported by hashcat. Given access to a Keychain ...
Graham Miln's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible