Simple Password-Hardened Encryption Services

Virgil Security introduces to developers an implementation of the Password-Hardened Encryption (PHE) protocol that provides developers with a technology to protect users passwords from offline attacks and make stolen passwords useless even if your database is breached.

PHE is a new, more secure mechanism that protects user passwords and lessens the security risks associated with weak passwords. Neither Virgil nor attackers know anything about user's password.

Authors: Russell W. F. Lai, Christoph Egger, Manuel Reinert, Sherman S. M. Chow, Matteo Maffei and Dominique Schroder

WhitePaper: https://www.chaac.tf.fau.de/files/2018/06/main.pdf

Go implementation by Alexey Ermishkin VirgilSecurty.com.