mORMot2 icon indicating copy to clipboard operation
mORMot2 copied to clipboard

Add Argon2id via OpenSSL

Open synopse opened this issue 1 month ago • 0 comments

Implementing Argon2 in pure pascal is not an option for us, since the algorithm seems too complex, and alternatives like BCrypt and SCrypt are already available, with very efficient code. I agree with JackTrapper here: https://github.com/JackTrapper/argon2-for-delphi

OpenSSL 3.2 seems to have added Argon2. https://docs.openssl.org/3.2/man7/EVP_KDF-ARGON2/#examples Goal of this feature request is to allow mORMot users who want to use this algorithm to be able to do so, e.g. over SCRAM.

We would only support "ARGON2ID" since it is the only one without known weaknesses. We would follow https://passlib.readthedocs.io/en/stable/lib/passlib.hash.argon2.html Modular Crypt format.

synopse avatar Nov 15 '25 17:11 synopse