Hello Internals,
The RFC for including Argon2id in password_* functions is now open for a
vote. The RFC is available at
https://wiki.php.net/rfc/argon2_password_hash_enhancements.
Voting will be open until June 18th, 2018.
Thank you.
---
Charles R. Portwood II
On Feb 5, 2018, 9:43 AM -0600, Charles R. Portwood II
, wrote:
> Hello Internals,
>
> I would like to propose adding Argon2id to the password_* functions in PHP
> 7.3.
>
> An RFC[1] has been prepared which covers implementation details, and some
> common questions &
ttps://wiki.php.net/rfc/argon2_password_hash_enhancements
[2]: https://github.com/php/php-src/compare/master...
charlesportwoodii:argon2_password_hash_enhancements?expand=1
---
Charles R. Portwood II
On Thu, Sep 8, 2016 at 10:09 AM, Christoph M. Becker
wrote:
> On 08.09.2016 at 16:26, Charles R. Portwood II wrote:
>
> > On Wed, Aug 24, 2016 at 10:49 AM, Charles R. Portwood II wrote:
> >
> >> The RFC for introducing Argon2 as an alternative hashing algorit
On Wed, Aug 24, 2016 at 10:49 AM, Charles R. Portwood II wrote:
> Hello,
>
> The RFC for introducing Argon2 as an alternative hashing algorithm for the
> password_* functions is now re-open. The RFC is available at
> https://wiki.php.net/rfc/argon2_password_hash
>
>
>
>
On Wed, Aug 24, 2016 at 10:49 AM, Charles R. Portwood II wrote:
> Hello,
>
> The RFC for introducing Argon2 as an alternative hashing algorithm for the
> password_* functions is now re-open. The RFC is available at
> https://wiki.php.net/rfc/argon2_password_hash
> .
>
> V
previously voted you will need to vote
again, as the original vote was closed shortly after opening due to an
issue with the original RFC language.
Thanks!
*Charles R. Portwood II*
On Sat, Aug 6, 2016 at 12:55 PM, Charles R. Portwood II <
charlesportwoo...@erianna.com> wrote:
>
>
> I think there's a bunch of ways we can tweak this. As there's no "bad"
> values for any of these cost factors per the spec, it may just be easy to
> se
o
verify Argon2 hashes created with a hash key and associated data without
changing the PHP API for that function.
*Charles R. Portwood II*
On Sat, Aug 6, 2016 at 11:37 AM, Lauri Kenttä
wrote:
> On 2016-08-06 17:47, Charles R. Portwood II wrote:
>
>> Absolutely. What are your thoughts on the following cost factors?
>>
>> time_cost = 3
>> memory_cost = 12
>> threads = 1
>>
>> The refe
On Sat, Aug 6, 2016 at 6:09 AM, Niklas Keller wrote:
> 2016-08-05 22:51 GMT+02:00 Lauri Kenttä :
>
>> On 2016-08-05 21:20, Charles R. Portwood II wrote:
>>
>>> On Fri, Aug 5, 2016 at 12:12 PM, Tom Worster wrote:
>>>
>>>>
>>>> I can u
On Fri, Aug 5, 2016 at 12:12 PM, Tom Worster wrote:
>
> I can understand an argument that it's too much to expect a user to
> provide an options array when using Argon2. But I don't understand how my
> suggestion breaks BC. In my idea, a future RFC would propose default cost
> constants. Changing
;t change.
On Fri, Aug 5, 2016 at 11:29 AM, Niklas Keller wrote:
>
> Hi Charles,
>
> I'd prefer `memory_cost` and `time_cost` over `m_cost` and `t_cost`. Do we
> have any reason to use the shorter but less readable names here?
>
> Regards, Niklas
>
'm_cost' and 't_cost' is what is used in the reference library. Someone
looking at the reference material would see those names.
Thanks,
*Charles R. Portwood II*
On Fri, Aug 5, 2016 at 9:49 AM, Charles R. Portwood II <
charlesportwoo...@erianna.com> wrote:
> On Fri, Aug 5, 2016 at 9:19 AM, Tom Worster wrote:
>
>> On 8/5/16 8:47 AM, Charles R. Portwood II wrote:
>>
>> The RFC is available at: https://wiki.ph
On Fri, Aug 5, 2016 at 9:19 AM, Tom Worster wrote:
> On 8/5/16 8:47 AM, Charles R. Portwood II wrote:
>
> The RFC is available at: https://wiki.php.net/rfc/argon2_password_hash
>>
>> .
>>
>
> Hi Charles,
>
> Thanks for doing this. I'm glad Argon2
ly to discuss the matter on Monday,
and for your feedback on these changes.
*Charles R. Portwood II*
On Mon, Aug 1, 2016 at 3:27 PM, Charles R. Portwood II <
charlesportwoo...@erianna.com> wrote:
> On Mon, Aug 1, 2016 at 3:16 PM, Davey Shafik wrote:
>
>> On Mon, Aug 1, 2016 at 1:13 PM, Charles R. Portwood II <
>> charlesportwoo...@erianna.com> wrote:
>>
&g
On Mon, Aug 1, 2016 at 2:41 PM, Davey Shafik wrote:
> On Mon, Aug 1, 2016 at 12:35 PM, Davey Shafik wrote:
>
>> On Mon, Aug 1, 2016 at 10:46 AM, Charles R. Portwood II <
>> charlesportwoo...@erianna.com> wrote:
>>
>>> Hello,
>>>>
>>>&g
those need to be adjusted please
let me know.
Thanks!
*Charles R. Portwood II*
Hello Internals,
I'd like to propose the implementation of the Argon2 hashing library into
the password_* functions, and would like to open this RFC to further
discussion.
RFC: https://wiki.php.net/rfc/argon2_password_hash
Thank you,
*Charles R. Portwood II*
;
> On Sun, Jul 10, 2016 at 1:24 AM, Pierre Joye wrote:
>
>>
>> On Jul 10, 2016 2:38 AM, "Charles R. Portwood II" <
>> charlesportwoo...@erianna.com> wrote:
>> >
>> > Hello Internals,
>> >
>> > I'd like to improve th
password_*
functions. I would handle implementation of this enhancement, and would
like to gather your feedback before formally proposing an RFC.
My wiki username is: charlesportwoodii
Thank you!
*Charles R. Portwood II*
[1] <https://github.com/P-H-C/phc-winner-argon2>
[2] <https://passwo
22 matches
Mail list logo
