Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:101777 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 77020 invoked from network); 5 Feb 2018 16:00:26 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 5 Feb 2018 16:00:26 -0000 Received: from [127.0.0.1] ([127.0.0.1:16651]) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ECSTREAM id AD/7E-49805-99F787A5 for ; Mon, 05 Feb 2018 11:00:25 -0500 Authentication-Results: pb1.pair.com smtp.mail=charlesportwoodii@erianna.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=charlesportwoodii@erianna.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain erianna.com designates 209.85.160.50 as permitted sender) X-PHP-List-Original-Sender: charlesportwoodii@erianna.com X-Host-Fingerprint: 209.85.160.50 mail-pl0-f50.google.com Received: from [209.85.160.50] ([209.85.160.50:45498] helo=mail-pl0-f50.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 57/7E-49805-FCB787A5 for ; Mon, 05 Feb 2018 10:44:15 -0500 Received: by mail-pl0-f50.google.com with SMTP id p5so12010926plo.12 for ; Mon, 05 Feb 2018 07:44:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erianna.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=aoyVMXViIsUw5XmCFyEOgFfcjpZ1ARwSk1T948lpPmk=; b=LpSY0tsLN8nhm8uA+ELWkI3wmrEVQiSbuoCcJzpF5DIYouSTtVSDgYBG4mZY2l2jcD uIDEMOm7sa1eLFCFdiQbyLnEXjXKfNDIe1VuaDtyxjpwv1BbgAjfq+/GtgogwTO9LAky PUTmqOLpVCcXJjWxaXUYQDvw76bxSwdDgSGZs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=aoyVMXViIsUw5XmCFyEOgFfcjpZ1ARwSk1T948lpPmk=; b=KIsWR+IPYH3EnB83dLqbe8MRPx1BXbyiXLTau2lk9n3roRATY5sg5Bk9t4AyyrG37n YLth2llQ5Rruy9nxYJdVrwUkcPgYd7PKxFOaYpFpmOjhnzAnfaqjKTl3mN+K+IyG86Tu ZB8WTg5X8Wn+d2NoXf9i/joyYR32N4JLPuAio2jsAbrqFZfRtQ8n5bi2M++0Aoy4Qf8H RhE7luFyP1q9GT7sCYZwNtVNpqJX7QE2YJc0unnvUm8xoB3X846FiexJNN9mgX4MYgSA +gt3qaPZ/eVyx4i8gQCb4h5NwEfR74PR0sOTyZUZ9P8qb39TcBAqBRRW2UWop5BQslsU DUjw== X-Gm-Message-State: AKwxytdRucgWmldteHTIpVJcrOBK14Gm1SR6pSLfwrsb9KAwxZrCHCDn KvPw1FT2CQwO+jBXXK4lDpDwPQ8k8Kmy4vm5GqCblefb X-Google-Smtp-Source: AH8x224rh5GyC3qhfdgHtt039jAWEo2Uj2FczSxlcNRCqLRPKWQyLC7uIVck/qihQ1+zdqWOY41XUDMqKdynjD9xlSs= X-Received: by 2002:a17:902:8e8a:: with SMTP id bg10-v6mr45160641plb.162.1517845452134; Mon, 05 Feb 2018 07:44:12 -0800 (PST) MIME-Version: 1.0 Received: by 10.100.178.142 with HTTP; Mon, 5 Feb 2018 07:43:51 -0800 (PST) X-Originating-IP: [38.142.126.82] Date: Mon, 5 Feb 2018 09:43:51 -0600 Message-ID: To: PHP internals Content-Type: multipart/alternative; boundary="000000000000ffafe3056478eee3" Subject: [RFC][DISCUSSION] Argon2id in Password Hash From: charlesportwoodii@erianna.com ("Charles R. Portwood II") --000000000000ffafe3056478eee3 Content-Type: text/plain; charset="UTF-8" Hello Internals, I would like to propose adding Argon2id to the password_* functions in PHP 7.3. An RFC[1] has been prepared which covers implementation details, and some common questions & concerns that I have anticipated. This RFC also includes a tested and working implementation[2] to illustrate changes to PHP itself. The biggest question at this time is how we want to handle versioning of the Argon2 reference library. The RFC covers this issue in detail and provides a solution that ensures no BC breakage for existing users. I look forward to hearing your feedback. Thanks. [1] https://wiki.php.net/rfc/argon2_password_hash_enhancements [2]: https://github.com/php/php-src/compare/master... charlesportwoodii:argon2_password_hash_enhancements?expand=1 --- Charles R. Portwood II --000000000000ffafe3056478eee3--