Questions tagged [argon2]

Argon2 is a password hash or password-based key derivation function, which won the password-hashing competition in 2015.

Argon2 is a password hash or password-based key derivation function, which won the password-hashing competition which ran from 2013 to 2015.

References:

110 questions
6
votes
1 answer

Argon2 parameters concurrent access

I am trying to figure out the best parameters for Argon2 for password hashing. I have read the RFC and the recommendations they put into it. So I follow up on the recommendation on the paper depending on my target machine. The thing is that one…
jasg
  • 61
  • 2
3
votes
1 answer

Independently choose lanes and threads param on Argon2

I'm researching on using Argon2 on a JavaEE server-side application. I'm a bit reluctant to set the parallelism parameter larger than 1 on a JavaEE environment where threads are supposed to be managed by the application server etc, etc. One idea is…
Kos Prov
  • 133
  • 4
2
votes
2 answers

Is salt required in Argon2

I have software that generates user login keys randomly, we store the argon2 hash on our server. The generated keys are very strong, 64 pRNG hex characters. Right now we just use an empty string as the salting parameter in argon2 since we figure…
Albert Renshaw
  • 143
  • 1
  • 8
1
vote
1 answer

What makes Argon2 also slow?

So as I understand Argon2 is a memory-hard function, in other words it has to use a certain amount of memory, thus making it effective against GPUs. So would this in theory, make Argon2 useless against an adversary with infinite memory? But also if…
Hormoz
  • 789
  • 1
  • 6
  • 11
1
vote
1 answer

python argon2-cffi salt is different than the one passed

Here's the code: salt = b'salt123123123' password = 'password123' hash_password = argon2.PasswordHasher().hash(password.encode('UTF-8'), salt =…
Coffee
  • 11
  • 1
1
vote
1 answer

Django password hashes in database

can someone explain to me why django saves the hash in the database asargon2$argon2id$v=19$m=102400,t=2,p=8$... and not $argon2id$v=19$m=102400,t=2,p=8$...?
Gogu123
  • 11
  • 1
1
vote
0 answers

Performing client independent update of hash with Argon2

I'm trying to perform a hash update with updated parameters using argon2. According to Argon spec v3 (2.2.3 Client-indepentend Update, p. 9) the client independent update is executed as follows: $$ Tag_{new} =…
prohit
  • 111
  • 2
0
votes
0 answers

How secure is Argon2ID with minimal parameters?

I am trying to make the login page faster by using low ram $hash = sodium_crypto_pwhash_str($password.$MAC, 1, 10240); My question is that I dont like login page taking too long to process like one second and if I make it faster by using minimum…
Saud Iqbal
  • 101
  • 3
0
votes
1 answer

Are HAIFA-construction based hash functions (e.g. Argon2) resistant to length-extension attacks?

Would a HAIFA-construction based hash function like Argon2 resistant to length-extension attacks? I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based on BLAKE.
user73598
0
votes
1 answer

argon2i hashes with GPU using JTR or any other tool please help!

I have been working on an assignment to solve argon2i hashes but unfortunately. I am not able to use GPU with JTR i.e. no opencl mode for argon2. Thus the speed is very slow. Any suggestion how to proceed using GPU based attack?