@majikah/majik-key 0.1.2 → 0.1.3

package/README.md

@@ -98,7 +98,7 @@ Every identity now generates a dual-key system derived deterministically from a
 
 ### 2. Argon2id Key Derivation
 We have transitioned to **Argon2id** (KDF v2) for encrypting private keys at rest.
-* **Memory-Hard:** Configured with 128 MB of memory, 4 iterations, and 4 parallelism factors.
+* **Memory-Hard:** Configured with 64 MB of memory, 3 iterations, and 4 parallelism factors.
 * **Brute-Force Resistant:** Engineered to defeat GPU and ASIC-based cracking attempts that easily bypass older PBKDF2 implementations.
 
 ### 3. Seamless Auto-Migration
@@ -137,7 +137,7 @@ A Majik Key is a seed phrase account that:
 
 ### Security & Post-Quantum Readiness
 - **Post-Quantum Ready**: Implements **ML-KEM-768 (FIPS-203)** for key encapsulation, ensuring identities are secure against future quantum computing threats.
-- **Argon2id Key Derivation**: Uses memory-hard **Argon2id** (KDF v2) for passphrase encryption (128 MB / 4 iterations / 4 parallelism), providing industry-leading resistance to GPU/ASIC brute-force attacks.
+- **Argon2id Key Derivation**: Uses memory-hard **Argon2id** (KDF v2) for passphrase encryption (64 MB / 3 iterations / 4 parallelism), providing industry-leading resistance to GPU/ASIC brute-force attacks.
 - **Seamless Auto-Migration**: Automatically detects and upgrades legacy v1 (PBKDF2) accounts to v2 (Argon2id) during import, re-deriving missing ML-KEM keys deterministically from the seed.
 - **AES-GCM Authenticated Encryption**: Industry-standard encryption for private keys at rest with unique, per-identity salts and random IVs.
 - **Locked/Unlocked States**: Private keys are only decrypted into memory when explicitly unlocked and are purged immediately upon calling `.lock()`.
@@ -833,7 +833,7 @@ async function createMessageIdentity() {
 3. **PQ Readiness**: For all new communication protocols, ensure you are utilizing the mlKemPublicKey.
 
 Security Summary
-- **Primary KDF**: Argon2id (128MB / 4t / 4p).
+- **Primary KDF**: Argon2id (64 / 3t / 4p).
 
 - **Legacy KDF**: PBKDF2-SHA256 (250,000 iterations).
 
@@ -893,7 +893,7 @@ Secure messaging platform using Majik Keys
 
 [Read more about Majik Message here](https://majikah.solutions/products/majik-message)
 
-[![Majik Message Thumbnail](https://gydzizwxtftlmsdaiouw.supabase.co/storage/v1/object/public/bucket-majikah-public/main/Majikah_MajikMessage_SocialCard.webp)](https://message.majikah.solutions)
+[![Majik Message Thumbnail](https://github.com/user-attachments/assets/d433c6b8-1841-4fa1-a6da-b348029d1dbe)](https://message.majikah.solutions)
 
 > Click the image to try Majik Message live.
 

package/dist/core/crypto/constants.d.ts

@@ -41,8 +41,8 @@ export type KDF_VERSION = (typeof KDF_VERSION)[keyof typeof KDF_VERSION];
  */
 export declare const ARGON2_PARAMS: {
     readonly PASSPHRASE: {
-        readonly m: 131072;
-        readonly t: 4;
+        readonly m: 65536;
+        readonly t: 3;
         readonly p: 4;
         readonly dkLen: 32;
     };

package/dist/core/crypto/constants.js

@@ -37,8 +37,8 @@ export const KDF_VERSION = {
  */
 export const ARGON2_PARAMS = {
     PASSPHRASE: {
-        m: 131072, // memory in KB (128 MB)
-        t: 4, // time cost (passes)
+        m: 65536, // memory in KB (128 MB)
+        t: 3, // time cost (passes)
         p: 4, // parallelism (lanes)
         dkLen: 32, // output length in bytes (256-bit AES key)
     },

package/package.json

@@ -2,7 +2,7 @@
   "name": "@majikah/majik-key",
   "type": "module",
   "description": "A post-quantum ready seed phrase account library for the Majikah ecosystem. Manages deterministic X25519 and ML-KEM-768 identities with Argon2id protection and seamless legacy account migration.",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "license": "Apache-2.0",
   "author": "Zelijah",
   "main": "./dist/index.js",