openssl icon indicating copy to clipboard operation
openssl copied to clipboard

Add Support for Argon2

Open BenMorganMY opened this issue 7 months ago • 2 comments

Hey there,

In OpenSSL 3.2, support for Argon2 was added. OpenSSL::KDF has support for scrypt but it would be great if it also supported Argon2. This would mean applications would no longer need to install the argon2 gem and would reduce the need for ffi to be set up as well.

https://github.com/openssl/openssl/pull/12256

BenMorganMY avatar May 22 '25 18:05 BenMorganMY

Argon2 appears to be available through the EVP_KDF API, which was added in OpenSSL 3.0. As the first step we'd want to expose the generic EVP_KDF interface to Ruby.

https://docs.openssl.org/master/man7/EVP_KDF-ARGON2/

Somewhat similar to EVP_MAC which was also added in OpenSSL 3.0 and uses an OSSL_PARAM array for input. https://github.com/ruby/openssl/pull/891

rhenium avatar May 24 '25 17:05 rhenium

Thank you for working on this @rhenium! I look forward to using this in the future.

BenMorganMY avatar Sep 24 '25 18:09 BenMorganMY