Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94457
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.218.42 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAEZPtU6E9JGHuxWdOSQMpSWS29Mu69rDVFSmaySWoB-t4rS5zg@mail.gmail.com>
References: <CAGC=tR=hPyeQkwY5Bru-psN-5ebpeafox3CEyh-u9haLNbFVpg@mail.gmail.com>
	<CAEZPtU4pkJJ7DD88XeZCCy9GZ2PAPw_bR2b3QN1fec14txGAhw@mail.gmail.com>
	<CAEZPtU6E9JGHuxWdOSQMpSWS29Mu69rDVFSmaySWoB-t4rS5zg@mail.gmail.com>
Date: Sun, 10 Jul 2016 12:24:09 +0700
Message-ID: <CAEZPtU6m3VqLp20iqjvQ-cWcM_BR2M5TYCq2-=Zpa_n+js-2vg@mail.gmail.com>
To: "Charles R. Portwood II" <charlesportwoodii@erianna.com>
Cc: PHP internals <internals@lists.php.net>, Scott Arciszewski <scott@paragonie.com>
Content-Type: multipart/alternative; boundary=001a11c00038cba8840537413e1a
Subject: Re: [PHP-DEV] Request for wiki karma
From: pierre.php@gmail.com (Pierre Joye)

--001a11c00038cba8840537413e1a
Content-Type: text/plain; charset=UTF-8

On Jul 10, 2016 2:38 AM, "Charles R. Portwood II" <
charlesportwoodii@erianna.com> wrote:
>
> Hello Internals,
>
> I'd like to improve the password_* functions by adding support for
> Argon2[1], the winner of the Password Hasing Competition[2].
>
> I've previously implemented an extension[3] to handle this, however I
> believe this would be better to have Argon2 implemented directly
password_*
> functions. I would handle implementation of this enhancement, and would
> like to gather your feedback before formally proposing an RFC.
>
> My wiki username is: charlesportwoodii
>
> Thank you!
> *Charles R. Portwood II*
>
> [1] <https://github.com/P-H-C/phc-winner-argon2>
> [2] <https://password-hashing.net/>
> [3] <https://github.com/charlesportwoodii/php-argon2-ext>

Hi Charles,

Nice work already.

I add Scott to this thread to be sure he reads. As far as I remember he has
a patch too but there was concerns about having argon2 support at this
stage because of the current state of argon2 specs (or something along this
line).

Let be sure that these concerns are solved before considering to include it
as it means some bc risks later if the specs change.

Cheers
Pierre

--001a11c00038cba8840537413e1a--