forge icon indicating copy to clipboard operation
forge copied to clipboard

pbkdf2 with SHA-1 algorithm still a secure default?

Open WardPearce opened this issue 3 years ago • 0 comments

Greetings, My brain panics whenever seeing SHA-1, after doing some research appears SHA-1 is still considered secure for key derivation (this site seeming the most reputable).

Just wanting to see if anyone had any information if SHA-1 is still future proof for pbkdf2 key derivation? What would be the benefit of using SHA-256?

Also appears the documentation for changing the algorithm isn't apparent.

WardPearce avatar Apr 04 '22 01:04 WardPearce