Move password-based key derivation to Argon2 #8
Description
Password-based key derivation for both the backup system and secure storage handler uses PBKDF2 with OWASP-recommended parameters. While this is currently a safe approach given the threat model and parameters used (and a sufficiently complex passphrase), it is suboptimal. We looked into the use of Argon2, but library support was not mature enough to deploy.
This is a tracking issue to keep in mind that Argon2 is a better approach to this kind of key derivation. Once library support evolves sufficiently, we should migrate to it.