Fabio Pietrosanti (naif) - lists
lists at infosecurity.ch
Wed Mar 11 06:53:35 EDT 2015
at GlobaLeaks we're undergoing implementation of client-side encryption
with server-side storage of PGP Private keys.
Obviously the hashing to be used for storing such PGP private keys has
to be strong enough, with valuable key-stretching approach.
We're now considering using Scrypt with some finely tuned parameters,
but we've concern regarding it's performance in the browser as a JS
PBKDF2 is available from WebCrypto API and, as far as i read and
understand but i'm not that low-level-crypto expert, is used internally
Does anyone know of any scrypt implementation that try to leverage the
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - https://globaleaks.org - https://tor2web.org - https://ahmia.fi
More information about the cryptography