Req #75388 [Opn->Fbk]: Argon2: Add secret/key

From: Date: Mon, 16 Oct 2017 14:03:09 +0000
Subject: Req #75388 [Opn->Fbk]: Argon2: Add secret/key
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-211720@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=75388&edit=1 ID: 75388 Updated by: requinix@php.net Reported by: phpdoc at mail dot my1 dot info Summary: Argon2: Add secret/key -Status: Open +Status: Feedback Type: Feature/Change Request Package: *Encryption and hash functions Operating System: Win8.1 x64 PHP Version: Next Minor Version Block user comment: N Private report: N New Comment: What are you asking for PHP to do, exactly? And is it something that can/should be easily handled in userland instead? Previous Comments: ------------------------------------------------------------------------ [2017-10-16 12:38:55] phpdoc at mail dot my1 dot info Description: ------------ In the input/output section of the argon2 standard, there is a key/secret value https://tools.ietf.org/html/draft-irtf-cfrg-argon2-03#page-5 and it is certainly not a bad idea to use that for peppering the passwords for extra security: https://en.wikipedia.org/wiki/Pepper_(cryptography) ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=75388&edit=1

« previous php.bugs (#211720) next »