You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current (2020) version of argon2-cffi implements version 1.3, as evidenced by the $v=19 (0x13) parameter in the produced hashes, but that is not documented anywhere in the repo that I've seen.
The README and the documentation should indicate which version is implemented, and document when it changes in the Changelog.
The text was updated successfully, but these errors were encountered:
nealmcb
added a commit
to nealmcb/argon2-cffi
that referenced
this issue
Jun 24, 2020
* Note - implements Argon2 version 1.3
Fixes#64 for the README.md
More detail on versioning in the Changelog would also be great.
* Fix lint bug trailing-whitespace
* Fix grammar
Three fixes in one :)
As discussed in Towards Practical Attacks on Argon2i and Balloon Hashing by Joel Alwen and Jeremiah Blocki, there have been significant changes to the version of Argon2 which won the Password Hashing Competition in 2015. The lastest version is 1.3, as described in the March 24, 2017 version of the Argon2 paper Argon2: the memory-hard function for password hashing and other applications by Alex Biryukov, Daniel Dinu, and Dmitry Khovratovich.
The current (2020) version of
argon2-cffi
implements version 1.3, as evidenced by the$v=19
(0x13) parameter in the produced hashes, but that is not documented anywhere in the repo that I've seen.The README and the documentation should indicate which version is implemented, and document when it changes in the Changelog.
The text was updated successfully, but these errors were encountered: