Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Since this is deprecated, what is the recommended equivalent of scrypt.params? #198

Open
fresheneesz opened this issue Dec 3, 2019 · 2 comments

Comments

@fresheneesz
Copy link
Contributor

scrypt.params is important because it allows you to choose an appropriate timeout for key stretching. Choosing a constant value for N would mean that your password storage would become easier and easier to crack over time. Since this is now recommending using node.js's crypto.script function instead, what is the recommended equivalent for scrypt.params to generate an N based on a maximum key stretching time?

@swansontec
Copy link

swansontec commented Jan 7, 2020

You can see the algorithm in the source code. It shouldn't be too hard to convert this to Javascript.

However, it looks like this has already been done over in scrypt-kdf. See the pickParameters function.

@fresheneesz
Copy link
Contributor Author

#200

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants