Hello Internals,

Due to a couple issue with the original RFC's scope, the RFC for
introducing Argon2 as an alternative hashing algorithm for the password_*
functions was closed shortly after starting on Monday.

The following details were adjusted. and I would appreciate your feedback
before re-opening the vote.

   - The RFC scope was reduced to only cover inclusion in 7.2. This RFC no
   longer proposes changes to PASSWORD_DEFAULT in 7.4.
   - Argon2d is not suitable for password hashing, and has been removed to
   keep in line with the scope goals of the password_* functions.
   - The configure flag was changed to --with-argon2 to
   --with-password-argon2 to further clarify the scope of this RFC.

Further rationale for these items is provided in the RFC itself.

The RFC is available at: https://wiki.php.net/rfc/argon2_password_hash.

Thanks to those who emailed me directly to discuss the matter on Monday,
and for your feedback on these changes.

*Charles R. Portwood II*

Reply via email to