Security
SwCrypts uses modern, battle-tested cryptography. Here is exactly how it works.
Cryptography
- Cipher: AES-256-GCM
- Key derivation: PBKDF2-HMAC-SHA256 with 600,000 iterations
- Salt: 16-byte random, persisted across rebuilds so returning visitors are not prompted again
Post-quantum safety
SwCrypts uses only symmetric primitives. There is no RSA, ECDH, or other public-key crypto for Shor's algorithm to break. Grover's algorithm halves the effective security level:
- AES-256 → ~128-bit post-quantum security
- SHA-256 → ~128-bit post-quantum preimage resistance
To preserve the full margin, your password must carry at least ~128 bits of entropy after accounting for Grover's speedup.
Password recommendations
| Scheme | Length | Classical entropy |
|---|---|---|
| Random alphanumeric (a–z, A–Z, 0–9) | ≥ 43 chars | ~256 bits |
| Random alphanumeric + symbols | ≥ 39 chars | ~256 bits |
| Diceware passphrase (EFF long list) | ≥ 20 words | ~259 bits |
Post-quantum, Grover's algorithm halves these values to ~128 bits.