All Questions
Tagged with password-hashing argon2
35 questions
2
votes
1
answer
132
views
Why does Argon2 truncate BLAKE2b outputs?
The Argon2 variable-length hash function uses BLAKE2b directly if the user requests an output less than or equal to 64 bytes in length. However, if the user requests an output longer than this, each ...
- 2,120
1
vote
0
answers
27
views
Argon2 confusion when computing J_1 and J_2
I'm implementing Argon2id from the RFC 9106 and I'm at the part where each thread computes J_1 and J_2 in order to generate indices [l] and [z].
I'm confused as to which TYPE (y = 0, 1 or 2) of Argon2 ...
- 159
0
votes
0
answers
3k
views
How can I decode the salt of this argon2i passwordhash?
I have this password hash: $argon2i$v=19$m=128,t=2411,p=2$hmJvvpH3BZlvb2V1vLm/yf3zANU4qNpKuw5TBnGzo2I$<censored>.
I know the password, and I want to verify if ...
3
votes
1
answer
461
views
Using Argon2, can I improve the salt join the password Argon(password,password+salt)?
I'm creating an application where I'm going to use Argon2, I'm going to have a password, and I'm going to use as salt: email+name+date of birth, you must think that my salt is silly because name and ...
- 33
0
votes
2
answers
328
views
Argon2 derive two keys from one password
This is not a duplicate, I'm asking which method is better.
I generate an encoded argon2 hash string, so it'll be stored in database to verify login passwords.
Saved encoded hash has salt of length ...
- 1
1
vote
0
answers
2k
views
What should argon2id parameters be
I plan to use it locally on mobile devices. These seems to do not offer computational power as good as on a server.
So what could be a secure argon2id parameters that run around 1s since offline apps ...
- 185
1
vote
1
answer
152
views
Will increasing timecost , memorycost , parallelism in argon2ID increase security in general?
currently I am using parameters for argon2ID in terms of timecost , memorycost , parallelism higher than what is recommended in RFC9106 https://www.rfc-editor.org/rfc/rfc9106.html for increased ...
1
vote
2
answers
716
views
Argon2id creating key for cryptography, how acceptable is it to use the same salt for the same encryption operation?
Everyone knows Argon2id is a slow hashing algorithm, and that's on purpose, all is good.
When creating an Argon2id object a lot of parameters are needed to be taken into consideration ultimately ...
- 23
2
votes
0
answers
79
views
How does the indexing in Argon2 work?
I am reading the original paper of Argon2 authors and I can understand the algorithm except the indexing part. Can anyone explain two things:
the indexing process and the mapping $J_{1}$, $J_{2}$ to ...
- 121
1
vote
0
answers
258
views
Estimated hardware cost to crack ARGON2ID hashed passwords
I can find a bunch of information on stuff like bcrypt and script, but I am interested in estimating the cost per hash on something like Argon2id that is GPU hardened. I am trying to do the best with ...
0
votes
1
answer
2k
views
Choose Argon2i or Argon2id for secure password hashing on a website? [duplicate]
I make a website with authentication. I have studied a lot of answers to these questions, but I still don't understand what is better and safer to use for a website: Argon2i or Argon2id?
I know which ...
- 1
0
votes
0
answers
588
views
Argon2id benchmarks
Recently I've decided to publish a simple app that I am using for maintaining and storing sensible encrypted data on the cloud.
https://www.microsoft.com/store/apps/9NSGBQSJ2HD6
The hashing is done ...
- 101
1
vote
0
answers
109
views
Signal Key Stretching Regarding Their Blog Post
I just read this blog post (Signal - Technology Preview for secure value recovery) by Signal and something is not quite clear to me. In section "Stretching beyond a KDF" they generate a ...
- 111
1
vote
1
answer
2k
views
Argon2 or scrypt instead of PBKDF2 with AES
Is using scrypt or argon2 a better key stretching technique with AES compared to PBKDF2 or bcrypt with regards to
a quantum computer brute force attack. The brute force attack I'm referring to is ...
- 111
29
votes
1
answer
20k
views
When to use Argon2i vs Argon2d vs Argon2id?
I've read the manual, and multiple articles / StackExchange posts about this topic, but still can't decide which implementation of Argon2 is best for my use case.
I want to securely encrypt passwords ...
- 393
1
vote
2
answers
1k
views
Password Hashing Security Using Scrypt & Argon2
I am developing an app where the following cryptographic system will be in place:
Elliptic Curve key exchange (curve: secp521r1)
Double Scrypt the shared secret with different salts
Pass this result ...
- 623
3
votes
2
answers
1k
views
How difficult is it to guess a salt based on a hash and known plain text?
I have the following use case:
Alice owns the domain alice.com and Bob owns bob.com.
I want to users to create a hash for ...
- 31
8
votes
2
answers
4k
views
Argon2 for both password storage and key derivation
Is using Argon2 for both password storage and key derivation secure? I'm planning on using different salt values, of course.
The basic concept is something like this:
Alice has some secret data ($...
- 83
4
votes
1
answer
916
views
Reasonable Password Entropy given a certain Set of argon2 Parameters
I followed the recommendation of choosing threads, memory consumption and the number of iterations (in that order) on my machine. But now I wonder which passwords (by means of entropy) are actually ...
- 141
16
votes
2
answers
5k
views
Argon2 - memory setting - lower bound?
(I realize this is yet another Argon2 "how do I configure" question, but the existing questions I've found don't really help. If I've missed one, happy to have this closed).
Deploying Argon2 ...
- 273
2
votes
1
answer
738
views
scrypt and argon2: binary safe?
for bcrypt it's probably common knowledge that it isnt binary safe because it uses null termination, which means that when bcrypt is used you need to make sure that no one does these (e.g. by hashing ...
- 340
5
votes
2
answers
797
views
Password derived hash to encrypt known plaintext as password check
The title sounds way too adventurous for what it actually is. I am currently building a system which features some encryption. There is already a system in place, which is built after that scheme if ...
- 151
47
votes
1
answer
25k
views
Why use argon2i or argon2d if argon2id exists?
I am currently working on a project where I want to implement Argon2. The problem is that I dont really know a lot about it. Internet research is not really helpful, because Argon2 is only 2 years old ...
- 4,495
21
votes
3
answers
4k
views
Why did Argon2 win the PHC?
I've been reading up on Argon2 (and, to a lesser extent, other recent password hashers). I'm trying to understand why it won the competition versus the other finalists, like Catena, Lyra2, Makwa or ...
- 799
6
votes
1
answer
527
views
What is the role played by cache misses in memory-hard password hashing?
I experiment with argon2 and build a web application. In browser, I use one threaded hashing with not too much memory. I want to protect my short length input data from parallel brute-force attack.
I ...
- 61
2
votes
1
answer
4k
views
What is the minimum recommended number of rounds for Argon2?
I'm hashing passwords with argon2 using Python's passlib library and am wondering how many rounds I should use to future proof security. The default uses 2 rounds but I'm wondering if it'd be sensible ...
- 47
8
votes
2
answers
4k
views
Whats the deal with argon2?
So I recently read an article about the Argon2 hash function.
Now some Questions:
I heard that it was developed in 2015 so why is it not implemented yet?
If so where is it implemented? ( I think I ...
- 4,495
11
votes
2
answers
3k
views
Best password hashing strategy with Argon2 in a web app
What are reasonable parameters for Argon2 to hash passwords in a web application? On the one hand we need good performance, fast responses and DDoS resistance, but on the other hand we need protection ...
- 656
15
votes
2
answers
13k
views
Storing Parameters In Argon2 Hash As Potential Security Issue?
I'm really trying to make sure that I follow best practices when it comes to password storage, and after some looking around for a good algorithm, I found that Argon2 was the "next big thing". I've ...
- 153
9
votes
1
answer
4k
views
How to configure Argon2d for commodity hardware?
You may already have heard it: KeePass v2.35 has support for a new database format (KDBX4) which allows for the use of Argon2 (more precisely: Argon2d) as the password-based key derivation function (...
- 46.4k
16
votes
3
answers
2k
views
Is it better to maximize memory usage or number of passes with Argon2i 1.3?
I wrote a small application that uses Argon2i for deriving symmetric keys for encryption of local files and secret Curve25519 keys. Argon2i v1.3 is susceptible to TMTO attacks if the number of passes ...
user40185
24
votes
2
answers
7k
views
Does the Balloon hashing paper deprecate Argon2?
Does the recent Balloon hashing paper and the included attack on Argon2 effectively negate the result of the Password Hashing Competition? On one hand it seems that only a constant-factor improvement ...
- 2,297
2
votes
2
answers
5k
views
Why do two Argon hashes with the same password differ?
Can someone explain to me what the ArgonHashString function in libsodium returns (i'm using the .net port).
For example i called it twice with the same string:
...
- 313
7
votes
1
answer
453
views
Are coprocessors (Intel Phi) a threat for modern key stretching functions?
Modern key stretching functions (password-based key derivation functions, also used for password hashing) are memory-hard to mitigate parallel attacks, and as far as I know this is working well. Last ...
- 221
30
votes
3
answers
25k
views
What is the recommended number of iterations for Argon2?
I've recompiled my operating system ("LionBSD" based on FreeBSD) to use Argon2i as the default password hashing algorithm in crypt/libcrypt.
I'm wondering what the recommended number of iterations ...
- 435