Questions tagged [argon2]

Argon2 is a key derivation function that was selected as the winner of the Password Hashing Competition in July 2015.

35 questions
109
votes
1 answer

In 2018, what is the recommended hash to store passwords: bcrypt, scrypt, Argon2?

There are many questions about picking a hash function, including How to securely hash passwords? or Are there more modern password hashing methods than bcrypt and scrypt? , with very detailed answers, but most of them date quite a bit . The…
jcaron
  • 4,220
  • 2
  • 19
  • 25
66
votes
7 answers

Is it safe/wise to store a salt in the same field as the hashed password?

In using Argon2 for hashing passwords in my application, I've noticed it generates a string like this (e.g. for password "rabbit"): $argon2i$v=19$m=65536,t=3,p=1$YOtX2//7NoD/owm8RZ8llw==$fPn4sPgkFAuBJo3M3UzcGss3dJysxLJdPdvojRF20ZE= My understanding…
PenumbraBrah
  • 771
  • 1
  • 5
  • 6
55
votes
3 answers

Which is the best password hashing algorithm in .NET Core?

What are the considerations when picking the best password hashing algorithm in .NET Core? I read that not all hashing algorithms are compliant / unverified, so I am a hesitant on just getting various implementations from NuGet. Also, it is not…
Water
  • 683
  • 1
  • 6
  • 6
18
votes
3 answers

Argon2 vs SHA-512, what's better in my case?

First I am very bad in cryptographic algorithms. I found online that Argon2 is more secure than SHA-512 , so I used it for password hashing. There're recommended options for Argon2 : Memory: 4Gb Iterations: 4 or more On my ancient server it takes a…
Denis Steinman
  • 283
  • 1
  • 2
  • 6
16
votes
1 answer

What are the minimum parameters for Argon2?

Argon2 is the winner of the Password Hashing competition, and currently recommended by OWASP for secure storage of passwords. One crucial step of Argon2 is determining the parameters used by the function. The current IETF draft titled " The…
user163495
12
votes
2 answers

Since GPUs have gigabytes of memory, does Argon2id need to use gigabytes of memory as well in order to effectively thwart GPU cracking?

The common advice of benchmarking a password hashing algorithm and choosing the slowest acceptable cost factor doesn't work for algorithms with more than one parameter: adding a lot of iterations at the expense of memory hardness makes the benchmark…
Luc
  • 33,389
  • 8
  • 83
  • 143
10
votes
1 answer

Which part of this encoded Argon2 hash is the salt?

I was reading the post Is it safe/wise to store a salt in the same field as the hashed password? : $argon2i$v=19$m=65536,t=3,p=1$YOtX2//7NoD/owm8RZ8llw==$fPn4sPgkFAuBJo3M3UzcGss3dJysxLJdPdvojRF20ZE= My understanding is that everything prior to p=…
Mr.President
  • 115
  • 1
  • 1
  • 6
8
votes
2 answers

Appending a secret (pepper) to Argon2 password hashes

I've read quite a bit of the StackExchange and HackerNews debates on the user of "peppers" in password hash security. There are a number of different implementations of the idea of a pepper, ranging from an additional hardcoded salt in the code…
Prime
  • 534
  • 7
  • 18
7
votes
1 answer

Source for up-to-date GPU/ASIC hash performance?

I am looking for CPU, GPU and/or ASIC performance stats on hash performance. Specifically SHA256 and Argon2i. I've googled and only came up with very limited anecdotal evidence. Considering that this fast-changing field is so important for security…
mkoistinen
  • 171
  • 1
  • 3
5
votes
2 answers

Is it true that argon2i is "preferred for password hashing and key derivation"?

I was looking at the wiki for the node-argon2 package in npm, when I came around this justification for using argon2i as the default mode: The variant of the hash function. Argon2 has several variants with different aims: argon2d is faster and…
SunshineToast
  • 88
  • 6
4
votes
2 answers

argon2id: Do I have to protect against timing attacks on login?

From other password hashing algorithms, I know that when a user tries to log in, and the account does not exist in the first place, it's best practice to still hash the provided password, so as not to leak information about whether the username is…
mhutter
  • 143
  • 7
4
votes
1 answer

Practicality of outsourcing password hashing using enclaves

I've been pondering some potential cybersecurity applications for enclaves. One of them being the problem of password hashing. Some clients have enclave support, meaning part of their CPU can securely execute code in an encrypted and authenticated…
Expectator
  • 290
  • 1
  • 7
3
votes
1 answer

Why does OWASP recommend only 1 degree of parallelism for Argon2id

Referencing this document , they give justifications for a number of their recommendations, but not any behind only going with 1 degree of parallelism for using Argon2id. Is there a reason why this is recommended that is unmentioned there?
Jesse C. Slicer
  • 133
  • 5
3
votes
1 answer

Configuring Argon2id for Multiple Threads

We're using argon2-jvm to use Argon2id on our Java TCP Server. Because its argon2id instance is thread-safe, we plan to only create a single instance for the lifetime of our app and have each request handler call it whenever necessary (e.g. for new…
Floating Sunfish
  • 159
  • 2
  • 8
3
votes
1 answer

Storing Argon2id parameters in a database?

I've decided to use Argon2id for storing users' passwords in my database. I have two questions: Because there are several input parameters (parallelism, iterations etc.) that can influence the output result so I'm wondering if it's a good idea to…
Filip Procházka
  • 131
  • 1
  • 3
1
2 3