Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:102042 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 58650 invoked from network); 14 Apr 2018 22:18:04 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 14 Apr 2018 22:18:04 -0000 Authentication-Results: pb1.pair.com smtp.mail=cmbecker69@gmx.de; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=cmbecker69@gmx.de; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmx.de designates 212.227.17.21 as permitted sender) X-PHP-List-Original-Sender: cmbecker69@gmx.de X-Host-Fingerprint: 212.227.17.21 mout.gmx.net Received: from [212.227.17.21] ([212.227.17.21:58503] helo=mout.gmx.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id F6/C9-36099-41E72DA5 for ; Sat, 14 Apr 2018 18:17:59 -0400 Received: from [192.168.2.105] ([91.8.175.66]) by mail.gmx.com (mrgmx101 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MIQlv-1fAU9y2Eet-004Bs8; Sun, 15 Apr 2018 00:17:49 +0200 To: Alice Wonder , internals@lists.php.net References: <3ee48a4e-1fe0-7054-9930-0d5a103b980f@librelamp.com> Message-ID: Date: Sun, 15 Apr 2018 00:17:47 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <3ee48a4e-1fe0-7054-9930-0d5a103b980f@librelamp.com> Content-Type: text/plain; charset=utf-8 Content-Language: de-DE Content-Transfer-Encoding: 8bit X-Provags-ID: V03:K1:HY8x4nKGONsmo/pbfl6WDVVR2zPEsoABP3UxrjLtGWf6h/jaZJa pH3/Zy9lrQ7lBgnajNYuq5J1fIj3E0+QR03eSFL9IC86zz1063Py/9v+OVr/xJodjNcfvrQ JHVMZ2B9xjVumHJLsfoKimawuoQQ0md0FqlV0OsmcAca3oHROhlkh7hzdtKpgpCw7fbrKHw 8lgpstgfd8WXmR61VIZMw== X-UI-Out-Filterresults: notjunk:1;V01:K0:mUJnTz++mA8=:TiDlK/UyYbCzbKpKMoeJ8L leMrDAkpPWvCgnGumZrFXimcjtfF21ZxzKU2Rkut2x2MFdjgfsWSpYIitdktXFPBlH5iq1Xp1 PIKTrRBB1+8lEZFOH0U7Zqn+VwsbaNT3we2RFxRNicuTBRO4Ycbg7qm3f/cdneP/4SOXVNOQV 4qnIvGQHcF5z1LVIRDJT8spVIwlz4D1nkLstPYjcDIAnKzsKioD/XxF4NRSlBM5ekYDBpbJHf enURXjvNynE7iN542aNFfnucUrsDRhqrV7tpRzNYoaypOME8OyK4oa3kaLsdY97Xn/pt2hTvK j82XprXOMpUIp5TrgA9PlBjtf8R9nqLaPeaVAH3qMKqm25IZqXfLZCkFxqEC++j2Tj3JBVCMC Yc4z8CRUHhCqN6TkmSrUxV8mth1kXvxsZWwNHqaJsV8kSyK+83ut+djc0DOpN122NMShcLDDm W+rm8h/ncd06MdGTuL/G3Emt7tCa82djxML03HAcpZziccktDJXizTWVjuTVHJsY3FfSpaoGT ODF7kTcFpeLTOtg8wTrPrAho2anCJG2lxMZhrckwxwpdgtwg24/6LodOPad0q2EWtSicRwGuW VhhkLzjzl2rk6C2hbkJyFEIdugwJZfHE0o/YWGe+vxeaJCKwa0JI33i2kEuaicXn/pqlkbiQ7 W3l+S+tAFMQfMEh/3BckAjkH/+ieXpvIIeuRBjkEKsXUe2KbcvtunpsCdydVLvyz0AQpi04QJ mJBrP13jxIqEBfyEGaJjsgPAqJdHIDO/di5p6pkGFxq2H+CdU1DvwnT3M4n2yWAY2kNRmqTdd daqFOO9Hazx/aX3E4el39u0aVY6OfnbZXRrpkl9/+isQ/mGJVc= Subject: Re: php and argon2 From: cmbecker69@gmx.de ("Christoph M. Becker") On 14.04.2018 at 23:53, Alice Wonder wrote: > In this RFC > > https://wiki.php.net/rfc/argon2_password_hash > > It looks like Argon2i is now implemented in PHP with the password_* > functions (though requires a compile flag ???) Indeed, the password_*() API supports Argon2i is as of PHP 7.2.0, if properly configured with `–with-password-argon2`[1] (which is still undocumented[2], by the way). > Since the sodium extensions used the Argon2id variant by default, would > it be prudent to make sure the php password_* functions can *verify* 2d > and 2id variant hashes, even if it does not set them by default? FWIW, there is already an RFC regarding support for Argon2id[3]. Hopefully, this will be implemented as of PHP 7.3.0. [1] [2] [3] -- Christoph M. Becker