On Thu, Oct 10, 2013 at 10:23 AM, T. Linden <tlin...@cpan.org> wrote:

> As long scrypt is not part of libsodium, I had to implement my own key
> derivation style and this one is a widely used technique.


If you're not going to use scrypt (which I should really bug Frank about
getting added to libsodium again) you should really use a proper KDF for
this purpose like PBKDF2. It has a security proof among other things.

-- 
Tony Arcieri
_______________________________________________
zeromq-dev mailing list
zeromq-dev@lists.zeromq.org
http://lists.zeromq.org/mailman/listinfo/zeromq-dev

Reply via email to