>
> Argon2 also supports keyed hashes and associated data, but seen no
> mention of either.
> Jared


Hi Jared,

This is a design decision to prevent changing the PHP API.

The Argon2 reference library exposes two ways of working with Argon2
hashes, we can either use the Argon2_Context struct, or pass our data
directly to the argon2_hash/verify functions. The former is the only way to
provided a hash key and associated data.

Since password_hash doesn't expose the salt is generates, and since
password_verify doesn't accept an array options, it would be impossible to
verify Argon2 hashes created with a hash key and associated data without
changing the PHP API for that function.

*Charles R. Portwood II*

Reply via email to