Keeweb: Support KDBX4 and Argon2

Created on 23 Aug 2016  路  3Comments  路  Source: keeweb/keeweb

KeePass will have Argon2 password derivation function soon, instead of AES-based one. As WebCrypto doesn't provide built-in Argon2, we have to build it using asm.js and switch to WebAssembly, once it's supported.
Reference implementation, CC0:
https://github.com/P-H-C/phc-winner-argon2
Blake2 in js, CC0:
https://github.com/dchest/blake2s-js
https://github.com/dcposch/blakejs
libsodium (ISC license, C++ lib):
https://github.com/jedisct1/libsodium
libsodium in asm.js (ISC license, huge size ~800kb):
https://github.com/jedisct1/libsodium.js
KeePass thread:
https://sourceforge.net/p/keepass/discussion/329220/thread/a48066c0/
.NET implementation (some ideas for vector optimizations there; MIT license):
https://github.com/kmaragon/Konscious.Security.Cryptography
KDBX4:
http://keepass.info/help/kb/kdbx_4.html
Bad news here is that most probably we'll be a lot slower than desktop app.

enhancement kdbxweb security

Most helpful comment

First preview deployed to beta.keeweb.info

All 3 comments

First sketch of Argon2: https://github.com/antelle/argon2-browser#argon2-in-browser

First preview deployed to beta.keeweb.info

release published

Was this page helpful?
0 / 5 - 0 ratings

Related issues

waotzi picture waotzi  路  3Comments

amine250 picture amine250  路  3Comments

maks-a picture maks-a  路  3Comments

PercussiveRepair picture PercussiveRepair  路  4Comments

orschiro picture orschiro  路  4Comments