search

P-H-C / phc-winner-argon2

The password hash Argon2, winner of PHC
Other
4.78k stars 406 forks source link

hardened checks for numeric arguments #334

Open calestyo opened 2 years ago

calestyo commented 2 years ago

Given the security sensitive nature of the argon2 program, it should reject any invalid numbers in its arguments.

For example, the option -k 104u576, which is likely just a typo and should rather be -k 1048576, would be taken as 104, which is far less secure than the probably intended 1048576.

Signed-off-by: Christoph Anton Mitterer mail@christoph.anton.mitterer.name

calestyo commented 2 years ago

@khovratovich Do you know whether this is still maintained?