Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Pierre Joye
On Jan 12, 2016 6:28 AM, "Scott Arciszewski" wrote: > > On Mon, Jan 11, 2016 at 11:32 AM, Solar Designer wrote: > > > > On Mon, Jan 11, 2016 at 10:04:36AM -0500, Anthony Ferrara wrote: > > > To my understanding, the crypt scheme hasn't been formalized. Solar > > > Designer, can you confirm? > > >

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Scott Arciszewski
On Mon, Jan 11, 2016 at 11:32 AM, Solar Designer wrote: > > On Mon, Jan 11, 2016 at 10:04:36AM -0500, Anthony Ferrara wrote: > > To my understanding, the crypt scheme hasn't been formalized. Solar > > Designer, can you confirm? > > I think it has been, in the way defined by encoding.c in: > > http

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Solar Designer
On Mon, Jan 11, 2016 at 10:04:36AM -0500, Anthony Ferrara wrote: > To my understanding, the crypt scheme hasn't been formalized. Solar > Designer, can you confirm? I think it has been, in the way defined by encoding.c in: https://github.com/P-H-C/phc-winner-argon2 $ echo password | ./argon2 salt

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Anthony Ferrara
+ Solar Designer On Mon, Jan 11, 2016 at 7:55 AM, Rouven Weßling wrote: > >> On 11 Jan 2016, at 13:27, Pierre Joye wrote: >> >> Hi, >> On Jan 11, 2016 4:12 PM, "Rouven Weßling" wrote: >> > >> > * Is there already a crypt scheme for Argon2? Or are there any efforts to >> > define one? It would

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Rouven Weßling
> On 11 Jan 2016, at 13:27, Pierre Joye wrote: > > Hi, > On Jan 11, 2016 4:12 PM, "Rouven Weßling" wrote: > > > > * Is there already a crypt scheme for Argon2? Or are there any efforts to > > define one? It would good if PHP wouldn’t be an island. > > https://github.com/P-H-C/phc-winner-argon

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Pierre Joye
Hi, On Jan 11, 2016 4:12 PM, "Rouven Weßling" wrote: > > > > On 11 Jan 2016, at 07:57, Scott Arciszewski wrote: > > > > Does adding Argon2 as a possible choice for password_hash() + > > password_verify() need an RFC? Or can I just submit a pull request? > > The original RFC (https://wiki.php.net/

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Chris Riley
On 11 January 2016 at 09:12, Rouven Weßling wrote: > > > On 11 Jan 2016, at 07:57, Scott Arciszewski wrote: > > > > Does adding Argon2 as a possible choice for password_hash() + > > password_verify() need an RFC? Or can I just submit a pull request? > > The original RFC (https://wiki.php.net/rfc

Re: [PHP-DEV] PHP 7.1 - Argon2

2016-01-11 Thread Rouven Weßling
> On 11 Jan 2016, at 07:57, Scott Arciszewski wrote: > > Does adding Argon2 as a possible choice for password_hash() + > password_verify() need an RFC? Or can I just submit a pull request? The original RFC (https://wiki.php.net/rfc/password_hash) contained the following text: > I'd propose th