Req #75388 [Opn->Fbk]: Argon2: Add secret/key
| From: | requinix@php.net | Date: | Mon, 16 Oct 2017 14:03:09 +0000 |
| Subject: | Req #75388 [Opn->Fbk]: Argon2: Add secret/key | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-211720@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=75388&edit=1
ID: 75388
Updated by: requinix@php.net
Reported by: phpdoc at mail dot my1 dot info
Summary: Argon2: Add secret/key
-Status: Open
+Status: Feedback
Type: Feature/Change Request
Package: *Encryption and hash functions
Operating System: Win8.1 x64
PHP Version: Next Minor Version
Block user comment: N
Private report: N
New Comment:
What are you asking for PHP to do, exactly? And is it something that can/should be easily handled in
userland instead?
Previous Comments:
------------------------------------------------------------------------
[2017-10-16 12:38:55] phpdoc at mail dot my1 dot info
Description:
------------
In the input/output section of the argon2 standard, there is a key/secret value
https://tools.ietf.org/html/draft-irtf-cfrg-argon2-03#page-5
and it is certainly not a bad idea to use that for peppering the passwords for extra security:
https://en.wikipedia.org/wiki/Pepper_(cryptography)
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=75388&edit=1