Hacker News Reader

Pretty misleading!

They test an old version of Keepass with an old KDF (they recently switched to Argon2 which is much more resistant to GPU/ASIC attacks. Additionally KeepassDroid is intended to use vaults synched to the device via Google Drive, Dropbox or whatever, so having the vault in private storage makes no sense!

View on HN

They didn't 'switch' over. The KDBX 4 format introduces Argon2 as a possible KDF, in addition to AES-KDF which has been the dominant KDF in KeePass and its implementations.

Even the project with most contributors - KeePassXC, doesn't yet support KDBX 4, and work on it doesn't look like its moving either[1]. Most other implementations also don't support KDBX 4 format.

[1]: https://news.ycombinator.com/item?id=14634253

Reply on news.ycombinator.com