Argon2id
The Password Hashing Competition winner, and what Leumas already uses for account passwords. Memory-hard and side-channel-resistant; the strongest of the three if you can run it.
What it is made of
- Memory (KiB)
- 8192 – 1048576, default 65536
- Passes
- 1 – 16, default 3
- Lanes
- 1 – 16, default 4
- Runs in
- The server only
What it is
The Password Hashing Competition winner, and what Leumas already uses for account passwords. Memory-hard and side-channel-resistant; the strongest of the three if you can run it.
Where it runs
Argon2 has no browser implementation here — it is a native binding. Run this one on the server lane. Everything else in the lab runs in your browser by default, and the lab switches lane for you rather than hiding the option.
What the cost buys
A key-derivation function exists to be SLOW. Its cost parameters are how much work an attacker must repeat for every guess, so raising them raises the price of a dictionary attack directly. They are stored in the file, so a file encrypted with an unusual cost still opens with nothing but the passphrase — which is the reason the container format had to record them rather than assume them.
Try it
Open the lab, choose this, and raise its cost. You will feel the derivation take longer, and that time is what an attacker pays for every guess they make. The lab is a Leumas membership away; everything on this page is free.