citizen_snips

Is there any benefit from switching the "Database file encryption algorithm" from "AES/Rijndael (256-bit key, FIPS 197)" to "ChaCha20 (256-bit key, RFC 7539" or the "Key derivation function" from "AES-KDF" to "Argon2d" or "Argon2id"?

If I go to File->Database Settings->Security, I see a few different security options. How much do the options on this menu matter for the average user? Are the default values (Database file encryption algorithm: AES/Rijndael (256-bit key, FIPS 197), Key derivation function: AES-KDF, Iterations: 6000) more than strong enough for the average user?

Is there any benefit from switching the "Database file encryption algorithm" from "AES/Rijindael (256-bit key, FIPS 197)" to "ChaCha20 (256-bit key, RFC 7539" or the "Key derivation function" from "AES-KDF" to "Argon2d" or "Argon2id"?

Your Android app should be able to set the key transformation setting. I suggest you experiment. As always, make a backup copy of you database before making database setting changes. Apparently that only works on .kdb files, not .kdbx: https://github.com/bpellin/keepassdroid/issues/223

Key transformations complement database master password strength by limiting the password testing rate on a given computer. Does this mean if someone were to somehow acquire one of my .kdbx files, try to open it in KeePass, and then do a brute force attack on the password prompt text box, having the DB saved with a greater number of iterations will limit how fast they are able to input guesses?

I currently access my KeePass database from both Windows and Android, so my phone will be the limiting factor here. When I open a database on the KeePass Android app, I see a screen that says "Working..." and "Loading Database", and it takes about 2 full seconds to open. Is that delay likely due to the decryption that the phone has to perform to open the database or network latency when accessing the DB file stored on Dropbox?

If I go to File->Database Settings->Security, I see a few different security options. How much do the options on this menu matter for the average user? Are the default values (Database file encryption algorithm: AES/Rijindael (256-bit key, FIPS 197), Key derivation function: AES-KDF, Iterations: 6000) more than strong enough for the average user?

It's a Canon CanoScan 4400F. The specs are listed in the Quick Start Guide Instructions document on this page: https://www.usa.canon.com/internet/portal/us/home/support/details/scanners/support-scanners-canoscan-series/canoscan-4400f?tab=manuals