search

bbuck / dragon-mud

A text-based game engine written in Go and scripted with Lua.
Other
116 stars 16 forks source link

Avoid pzduniak/argon2, it's not up to date #82

Closed pzduniak closed 7 years ago

pzduniak commented 7 years ago

My port of libargon2 implements an old, vulnerable version of the algorithm. Unfortunately I don't think that there is any pure Go implementation with a full featureset, but the closest you can get is go-argon2 using CGo, there's also my fork which includes the C code, so that the whole library is self-contained.

bbuck commented 7 years ago

First off, thank you very much for bringing that to my attention!

Is there no way to update the pure Go implementation? I, admittedly, am not as familiar with things like cryptographic programming as I'd like to be. If possible though I could pursue a PR against your library to bring it all into the Go world?

I'm trying to avoid CGo altogether, which is why I'm using a Go implementation of Lua (even though it's about 3x slower than the C implementation).