Forum Discussion

AZBigdog's avatar
AZBigdog
Frequent Contributor
2 months ago
Solved

Argon2 KDF

I know I asked about this before, but haven't seen anything lately. Is 1Password working on adding Argon2 to encryption options? Several other password managers have it, so just curious as to when we might see it in 1Password.

 

feature request
  • 1P_Dave's avatar
    1P_Dave
    2 months ago

    Hello AZBigdog! 👋

    Thanks for the question! I don't have anything new to share regarding Argon2 support at the moment. Our security design white paper currently includes the following information in A1.1 - Crypto in the browser: 

    There’s a paucity of efficient cryptographic functions available to run in JavaScript. As a consequence, the WebCrypto facilities available in the browsers we support impose a limit on the cryptographic methods we can use. For example, our reliance on PBKDF2 instead of a memory hard KDF such as Argon2 is a consequence of this.

    Our blog is likely where any future developments will be announced in the future. 🙂

    -Dave

2 Replies

Sort By
  • AZBigdog's avatar
    AZBigdog
    Frequent Contributor
    21 days ago

    Thanks for the update.

    I know most of the other password managers have implemented it, so hopefully 1Password will find a way to as well. 

  • 1P_Dave's avatar
    1P_Dave
    Icon for Moderator rankModerator
    2 months ago

    Hello AZBigdog! 👋

    Thanks for the question! I don't have anything new to share regarding Argon2 support at the moment. Our security design white paper currently includes the following information in A1.1 - Crypto in the browser: 

    There’s a paucity of efficient cryptographic functions available to run in JavaScript. As a consequence, the WebCrypto facilities available in the browsers we support impose a limit on the cryptographic methods we can use. For example, our reliance on PBKDF2 instead of a memory hard KDF such as Argon2 is a consequence of this.

    Our blog is likely where any future developments will be announced in the future. 🙂

    -Dave