Skip to content

Iteration on current password-based KDF #2654

@cygnusv

Description

@cygnusv

Current password-based KDF in nucypher/py-umbral is excessively slow. This can be due to several factors:

  • Election of parameters: Current parameters are typical for file encryption. While this might be OK for Ursulas (which have a high keystore diligence requirement), it's not for Alice. A possibility is to keep similar parameters for Ursula, but reduce them for Alice or other characters.
  • Implementation: Some have noted that our current implementation (from cryptography.hazmat.primitives.kdf.scrypt) may be too slow in comparison with others. Investigate other alternative implementations.
  • Election of KDF algorithm: @tuxxy has mentioned their interest on Argon2. Investigate what's the performance.

Metadata

Metadata

Labels

CryptographySignatures, Ciphers, Hashing Algorithims, EncryptionGood Intro IssueGood issue for somebody who is still getting used to the project.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions