KeePassDX icon indicating copy to clipboard operation
KeePassDX copied to clipboard

Change KDF according to benchmark

Open ghost opened this issue 5 years ago • 3 comments

Is your feature request related to a problem? Please describe. The current default setting is AES-KDF with 6,000 transformation rounds. It is obviously too low without need. For your information, KeePassXC warns the AES-KDF with less than 100,000 transformation rounds.

Describe the solution you'd like KDF: Argon2 (Because all maintained KeePass clients I know have already supported Argon2) Transformation rounds: 1-sec benchmark Memory usage: 32/64MiB (Compatibility with iOS platform) Parallelism: the number of CPU cores

Describe alternatives you've considered Just increase the number of transformation rounds. For example, the Keepass2Android default setting is 500,000. and the previous default value for KeePassXC (now Argon2 and 1sec benchmark) is 1,000,000.

Additional context I don't know if the above setting works well on all supported devices (especially Cortex-A7?), or if they are appropriate for security.

ghost avatar Nov 07 '20 16:11 ghost