phc-discussions - Re: [PHC] Re: Argon2 PHC release...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 17 Oct 2015 06:05:07 +0000
From: Jean-Philippe Aumasson <jeanphilippe.aumasson@...il.com>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] Re: Argon2 PHC release...

Recommended parameters section says
"If you do not know the difference between them or you consider
side-channel attacks as viable threat, choose Argon2i."
and I think it's a good recommendation; safer by default.

On Sat, Oct 17, 2015 at 1:29 AM Dmitry Khovratovich <khovratovich@...il.com>
wrote:

> The spec lists 2d and 2i as primary ones, any suggestions to modify?
>
> Sent from my iPhone
>
> On 17 Oct 2015, at 00:30, Jean-Philippe Aumasson <
> jeanphilippe.aumasson@...il.com> wrote:
>
> The simplified API hash() (formerly PHS()) now defaults to Argon2i, as
> used in
> https://github.com/P-H-C/phc-winner-argon2/blob/master/examples/hash.c
>
> 4 instances in the final version is too much, we should have only 2: i and
> d, or some variants thereof.
>
> On Fri, Oct 16, 2015 at 11:04 PM Jean-Philippe Aumasson <
> jeanphilippe.aumasson@...il.com> wrote:
>
>> Samuel and I did a number of fixes to
>> https://github.com/P-H-C/phc-winner-argon2. If you clone this repo and
>> run ./test.sh you should get OKs for all the tests. Or not; please let us
>> know then.
>>
>> I've started a basic README at https://github.com/P-H-C/phc-winner-argon2,
>> which will contain usage instructions (copying from
>> https://github.com/khovratovich/Argon2). Any suggestion or contribution
>> welcome :-)
>>
>>
>>
>> On Fri, Oct 16, 2015 at 4:09 PM Jean-Philippe Aumasson <
>> jeanphilippe.aumasson@...il.com> wrote:
>>
>>> Did a couple more tweaks, including a usage() function
>>> https://github.com/P-H-C/phc-winner-argon2/blob/master/src/argon2-test.c printed
>>> when no argument is given. Still a lot to do here, and ideally we should
>>> use getopt for this rather than manual parsing.
>>>
>>> On Fri, Oct 16, 2015 at 10:58 AM Jean-Philippe Aumasson <
>>> jeanphilippe.aumasson@...il.com> wrote:
>>>
>>>> Working on a simpler code package, current version posted at
>>>> https://github.com/P-H-C/phc-winner-argon2
>>>>
>>>> So far reorganized and cleaned up the whole structure, keeping C only
>>>> and not C++, ported a minor change to the blake2b().
>>>>
>>>> With the Argon2 designers we'll improve the test suite and will make
>>>> the argon2 command-line interface more user-friendly.
>>>>
>>>> Comments and pull requests welcome :-)
>>>>
>>>>

Content of type "text/html" skipped