pecl-libsodium-doc icon indicating copy to clipboard operation
pecl-libsodium-doc copied to clipboard

Password hashing not argon2i but argon2id

Open My1 opened this issue 7 years ago • 2 comments

well when I do the following:

$h1=@sodium_crypto_pwhash_str("test",1,1<<26);

it throws this:

$argon2id$v=19$m=65536,t=1,p=1$TrIXxztPanspLgGdNv/TCg$OkI1oXPgUaWFnEpqOs7k6/n0xtfZqkTfsmfE/iqTvB0

clearly argon2id.

My1 avatar Nov 28 '17 09:11 My1

Congrats for having an operating system with up-to-date packages!

Unfortunately, most people use Linux distributions that are stuck with obsolete packages, and will remain so for years. And don't have Argon2id. Or Argon2 at all.

jedisct1 avatar Nov 28 '17 10:11 jedisct1

well I use Caddy with PHP7.2 on windows for developing and I try to push any hoster I use to get up to date stuff.

7.2 core sodium right now has a little annoyance with trying to use ops of 1 (I hope they fix it later, already reported there)

I am not a CEO or someone who has to worry about problems that come with updating like cost, I like argon and I want to use it.

and honestly I just argon for what it is because it enables hogging more system resources than bcrypt wihle also staying relatively quick (unless you go into memory regions of for example 1GB)

My1 avatar Nov 28 '17 10:11 My1