3 ms·

did you read the article? there is no reason to encrypt passwords. scrypt is a popular KDF, i think you'll be fine with that.

• agustif 6y ago
  Yes I did read the article, It's not a password, it's a PDF file, it's contents I store them as plain base64 now, but I'd rather have store them in a more secret fashion in case of a leak... If that makes sense...
  • iso8859-1 6y ago
    for the encryption itself, you can use e.g. LibSodium or AES (in a sensible mode!!!). of course, you'll need a key too, which is where you can use a KDF. but without knowing more about your threat model, it is hard to tell you how to do the key derivation.
    • agustif 6y ago
      Hey thanks, well I'm a bit out of my area here but that sounds helpful and will research it, thanks!!
    • StavrosK 6y ago
      Most of that is too low-level, libsodium/nacl is closer to what they want.
  • StavrosK 6y ago
    libsodium?