# libsodium based Argon2i(d) password_hash()

- Thread: https://externals.io/message/105991
- Original archive: https://news-web.php.net/php.internals/105991
- Started by Sara Golemon on 2019-06-19T22:53:49+00:00
- Messages: 3
- RFC: Argon2 support from sodium (Implemented (PHP 7.4)) — https://externals.io/rfc/sodium.argon.hash.md
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · RFCs at https://externals.io/rfc.md · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #105991 — Sara Golemon — 2019-06-19T22:53:49+00:00

URL: https://externals.io/message/105991#105991

I intend to move  https://wiki.php.net/rfc/sodium.argon.hash into voting on
Friday.

Note that I need to update the PR to reflect the decision to synchronize
the time_cost and mem_limit defaults for libargon based hashing with
libsodium.

If you have any last minute issues with this RFC, please bring them up now.

-Sara

---

## #105993 — Nikita Popov — 2019-06-20T07:33:52+00:00

URL: https://externals.io/message/105991#105993

> I intend to move  https://wiki.php.net/rfc/sodium.argon.hash into voti
>
> For "threads" (p=# in the hash output), the current PHP default is 2,
> while libsodium is hardcoded at 1, we can't override that.
> ng on
> Friday.
>
> Note that I need to update the PR to reflect the decision to synchronize
> the time_cost and mem_limit defaults for libargon based hashing with
> libsodium.
>
> If you have any last minute issues with this RFC, please bring them up now.
>

Could you please explicitly specify what the new default time/memory cost
factors will be?

Also, what is going to happen with threads? I assume the default will
become 1, but what happens is a larger value is specified while libsodium
is used?

Nikita

---

## #106009 — Sara Golemon — 2019-06-20T20:58:06+00:00

URL: https://externals.io/message/105991#106009

> 
>
> > […]
> now.
> > […]
>
> Could you please explicitly specify what the new default time/memory cost
> factors will be?
>
> Done.


> Also, what is going to happen with threads? I assume the default will
> become 1, but what happens is a larger value is specified while libsodium
> is used?
>
> Default to 1.  Users will be allowed to specify higher numbers, but the
sodium implementation will produce an error with values > 1.

-Sara