Update: This post is half-wrong; Salsa is a streaming cipher and AES is a block cipher and one still need a PBKDF mechanism to construct a safer key. Problem

Update: This post is half-wrong; Salsa is a streaming cipher and AES is a block cipher and one still need a PBKDF mechanism to construct a safer key. Problem with AES and Salsa is that salting is required for smaller-sized password and are not considered a "hashing" algorithm; those two are block ciphers, as I recall. No, MATESO is not open source but with an enterprise license, you can negotiate for the source code. And they have contracted audits against their software. Netwrix PasswordSafe is more enterprise-ready with their SOC 2, ISO 27001 and HIPAA compliance but that is a moot point for most SMBs, SMEs, family-servers and homelabs.