This library defaults to using SHA1 with PBKDF2, which is a very insecure hash function. I strongly suggest updating the default scheme. See related vulnerabilities: https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf https://github.com/entronad/crypto-es/security/advisories/GHSA-mpj8-q39x-wq5h