Tusk icon indicating copy to clipboard operation
Tusk copied to clipboard

Published 20 hours ago • verified publisher icon subdavis

Argon2 WASM implementation is too slow.

Open wolffx86 opened this issue 7 years ago • 8 comments

This issue is a

  • [x] bug
  • [ ] feature
  • [ ] question

Please describe the current behavior, and explain why it's bad.

The issue is whenever i enter my master pw (whether it's right or wrong) it takes ~90sec for it to either return an error that the pw is invalid, or to give me the available credentials for the current tab. I noticed it is quicker to open after the initial unlock for pages that have already been "allowed".

Please describe how you think it should change.

Faster unlocks.

wolffx86 avatar Aug 08 '18 04:08 wolffx86

This is a known issue of argon2 on the web. Thanks for raising this issue. There is probably nothing we can do about it for the short term.

You can set your argon 2 hashing rounds down to a lower number to speed things up if you want.

subdavis avatar Aug 08 '18 11:08 subdavis

Thanks for the quick response.

Where is that setting at?

wolffx86 avatar Aug 08 '18 17:08 wolffx86

Tusk is read only. You'll need to use a full KeePass app like KeePassXC.

In file -> database settings there should be some options to set your crypto preferences.

subdavis avatar Aug 08 '18 18:08 subdavis

@subdavis Out of curiosity, can you point me towards some additional information on this known issue? I find it interesting that KeeWeb opens my database in 8.5 seconds but Tusk takes 33.0 seconds on the same device. (Keepass2Android takes 9.0 seconds on my phone.)

uncon avatar Aug 27 '18 20:08 uncon

Keepass2Android doesn't even take 9 seconds back before i changed the hashing rounds for Tusk. It was usually instant after completing the password entry @uncon. that's why i was a bit confused why Tusk was taking forever.

wolffx86 avatar Sep 23 '18 20:09 wolffx86

I think since there is nothing we can do about it I'll close it. Also if anything keeweb can be blamed since that's the library that is used for decryption.

zmilonas avatar Oct 11 '18 17:10 zmilonas

I'm not ok with closing this yet. @uncon and @wolffx86 make a good point about how it takes longer on Tusk than KeeWeb.

subdavis avatar Oct 11 '18 17:10 subdavis

I had the same problem, I can confirm that changing the key derivation algorithm from Argon2 to AES drastically decreases the time needed to unlock in Tusk: Database > Database settings > Encryption > Key Derivation Function > switch to something lower

Please give an update here if you ever fix this issue

qmeeus avatar Jan 27 '19 10:01 qmeeus