Version 2.0.1 Release Notes

Enhancements:

• Increased the length of the cryptographic salt used for key generation and encryption from 16 bytes to 32 bytes (256 bits) to enhance security.
• Modified the generate_key function to generate a 32-byte salt using os.urandom(32) when no salt is provided explicitly.
• Updated the decrypt_key_file function to read 32 bytes for the salt from the "key" file, ensuring compatibility with the longer salt length.

Impact:

• Improved resistance against precomputation attacks and salt collisions by expanding the salt space and reducing the likelihood of salt reuse vulnerabilities.
• Increased computational cost for attackers attempting to crack hashed passwords, thereby enhancing overall security posture.
• Aligned with best practices and security guidelines recommending longer salts for password hashing and key derivation.

Considerations:

• Longer salts may impose additional storage overhead and slightly increased computational overhead during key derivation and hashing operations.
• Compatibility with existing systems, libraries, and protocols should be verified to ensure seamless integration with the updated salt length.

Recommendation:

• Users are encouraged to upgrade to version 2.0.1 to benefit from enhanced security provided by longer cryptographic salts.