search

cdepillabout / password

datatypes and functions for easily working with passwords in Haskell
http://hackage.haskell.org/package/password
55 stars 16 forks source link

Argon2 v10 fix #56

Closed Vlix closed 2 years ago

Vlix commented 2 years ago

Aims to fix #54

Argon2 hash without a version part will be interpreted as having been hashed with version 1.0 (v=16)

Not so much a "bug", especially since almost all usages of Argon2 are generally version 1.3, but it's a small effort to also accept hashes without a version part.

Vlix commented 2 years ago

Just remembered it might be a good idea to also mention this in the documentation of Argon2? Or is that unnecessary? :thinking:

cdepillabout commented 2 years ago

Sorry for taking a long time to respond to this. I hope to get to this in a few days.

Vlix commented 2 years ago

No rush, this isn't a pressing fix 👌