search

dhui / passhash

Go library providing simple and secure password management
Apache License 2.0
8 stars 4 forks source link

Support Argon2 #6

Open dhui opened 6 years ago

dhui commented 6 years ago

Argon2 is now available in the golang.org/x/crypto/argon2 package. https://godoc.org/golang.org/x/crypto/argon2

Note: As of 2017-01-07, the Golang implementation chose to only expose Argon2i which is optimized for password hashing and KDFs since it's data independent. See:

Hold off on making Argon2 the default KDF until more time has passed: https://pthree.org/2016/06/29/further-investigation-into-scrypt-and-argon2-password-hashing/

dhui commented 6 years ago

golang.org/x/crypt/argon2 now "supports" the Argon2id variant by exposing it: https://github.com/golang/go/issues/23602 https://github.com/golang/crypto/commit/d9133f5469342136e669e85192a26056b587f503