-
-
Notifications
You must be signed in to change notification settings - Fork 166
Add Argon2id via OpenSSL #414
Copy link
Copy link
Open
Labels
enhancementNew feature or requestNew feature or requestinvestigateThis issue needs to be evaluated and confirmedThis issue needs to be evaluated and confirmed
Description
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestinvestigateThis issue needs to be evaluated and confirmedThis issue needs to be evaluated and confirmed
Implementing Argon2 in pure pascal is not an option for us, since the algorithm seems too complex, and alternatives like BCrypt and SCrypt are already available, with very efficient code.
I agree with JackTrapper here: https://github.com/JackTrapper/argon2-for-delphi
OpenSSL 3.2 seems to have added Argon2.
https://docs.openssl.org/3.2/man7/EVP_KDF-ARGON2/#examples
Goal of this feature request is to allow mORMot users who want to use this algorithm to be able to do so, e.g. over SCRAM.
We would only support "ARGON2ID" since it is the only one without known weaknesses.
We would follow https://passlib.readthedocs.io/en/stable/lib/passlib.hash.argon2.html Modular Crypt format.