drive-web icon indicating copy to clipboard operation
drive-web copied to clipboard

[PB-2666]: Feat/add argon2 and kyber

Open TamaraFinogina opened this issue 1 year ago • 4 comments

Update

  • Switching to Argon2. The idea is to re-compute all hashes in the database to Argon2 of the current PBKDF2 value and modify the login accordingly, then bit by bit change all users to just Argon2.
  • Add a post-quantum layer. The idea is always to send two encrypted values - 'secret' and 'secret XORed with the mnemonic'. The 'secret' is encrypted with KyberKEM (post-quantum) and 'secret XORed with mnemonic' with ECC from openpgp. This way, to get a mnemonic one must break both ECC and Kyber.

Related to PB-2666

TamaraFinogina avatar Sep 27 '24 16:09 TamaraFinogina

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
drive-web ✅ Ready (Inspect) Visit Preview 💬 Add feedback Nov 27, 2024 9:24am

vercel[bot] avatar Sep 27 '24 16:09 vercel[bot]

Deploying drive-web with  Cloudflare Pages  Cloudflare Pages

Latest commit: 8af2f7a
Status:⚡️  Build in progress...

View logs

@TamaraFinogina Please provide a description

sg-gs avatar Sep 30 '24 11:09 sg-gs

Hey @xabg2 @CandelR, We should review each line more carefully than a typical Pull Request as this could be a breaking change in the way we are modifying the involved cryptography for every customer

sg-gs avatar Nov 07 '24 11:11 sg-gs

Let's aim to increase the testing coverage to 80% @TamaraFinogina

sg-gs avatar Nov 11 '24 13:11 sg-gs

Quality Gate Failed Quality Gate failed

Failed conditions
48.7% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

sonarqubecloud[bot] avatar Nov 27 '24 09:11 sonarqubecloud[bot]