8
$\begingroup$

So I recently read an article about the Argon2 hash function. Now some Questions:

  1. I heard that it was developed in 2015 so why is it not implemented yet?

    If so where is it implemented? ( I think I saw it in KeePass2 )

  2. How strong is it in comparison aginst bcrypt or sha512 or whirlpool?

    Is it really that strong against gpu clusters?

Improve this question
$\endgroup$
0

2 Answers 2

Reset to default
10
$\begingroup$

  1. It has been implemented, of course. In addition to the reference implementation, there are some crypto libraries with it like libsodium.

    It has not yet seen much use in applications or protocols, because it is relatively new and security people tend to be conservative. (And two years simply is not that long.)

  2. Stronger, at least in theory. The resistance to GPGPU does depend somewhat on parameter choices. E.g. the more memory you use, the harder time GPUs have using all their execution hardware.

    The argon2d variant is meant to be even more resistant to GPU compute, at possible expense of side channel resistance in comparison to argon2i.

Improve this answer
$\endgroup$
2
$\begingroup$

I think that there are some security issues regarding Argon2. Ballon Hashing has been developed as an alternative (https://eprint.iacr.org/2016/027.pdf). They describe an attack against Argon2 in this paper as well.

Improve this answer
$\endgroup$
3
  • 1
    $\begingroup$ In theory, Balloon hashing too is broken. $\endgroup$
    – ckamath
    Commented Mar 21, 2017 at 20:37
  • 2
    $\begingroup$ Ballon hashing versus Argon is discussed in this question: crypto.stackexchange.com/q/39996/8925 $\endgroup$
    – rmalayter
    Commented Mar 22, 2017 at 13:21
  • $\begingroup$ This doesn't answer the question, it just says that there are attacks on (older) Argon2. $\endgroup$
    – forest
    Commented Jan 9, 2019 at 10:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.