search

cdepillabout / password

datatypes and functions for easily working with passwords in Haskell
http://hackage.haskell.org/package/password
55 stars 16 forks source link

Argon2 v1.0 hashes might not include "v=16" parameter #54

Closed Vlix closed 2 years ago

Vlix commented 2 years ago

This kind of falls in the list of #11 , but is a bit more important.

Apparently the older version of Argon2 didn't always enforce the $v=16$ version parameter in the hash, so we should also accept hashes that do not include the version parameter and default it to Version10.

The change would basically only include Data.Password.Argon2.checkPassword.