4 ms·
PBKDF2 is no longer recommended as a hashing algorithm, as it is easy to brute-force it on a GPU. Argon2id is the newest recommended algorithm (watch out for th
by franky47 6y ago
PBKDF2 is no longer recommended as a hashing algorithm, as it is easy to brute-force it on a GPU. Argon2id is the newest recommended algorithm (watch out for the other variants of Argon2 which are have trade-offs between GPU resistance and side-channel resistance).
If your language of choice does not have a decent, audited implementation of Argon2id, you can go with bcrypt or scrypt, which would be an improvement over PBKDF2, and usually widely available in most languages.
https://en.m.wikipedia.org/wiki/Argon2 https://en.m.wikipedia.org/wiki/Argon2
https://crypto.stackexchange.com/questions/30785/password-hashing-security-of-argon2-versus-bcrypt-pbkdf2#30786 https://crypto.stackexchange.com/questions/30785/password-ha...
- pazvanti 6y agoThanks. I was not aware that PBKDF2 is no longer recommended.