Re: [RFC] Provide argon2 support for password_hash() from ext/sodium
| From: | David Zuelke | Date: | Fri, 05 Apr 2019 18:29:15 +0000 |
| Subject: | Re: [RFC] Provide argon2 support for password_hash() from ext/sodium | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-105117@lists.php.net to get a copy of this message | ||
You're listing libsodium versions 0.15 and 0.13 there, but it should
be 1.0.15 and 1.0.13.
Maybe for everyone's reference: Ubuntu 16.04 LTS comes with no
libargon2, and with libsodium 1.0.8; 18.04 LTS comes with libargon2
and with libsodium 1.0.16.
Debian Stretch has 1.0.11, and 1.0.17 in backports.
On Fri, Apr 5, 2019 at 7:52 PM Sara Golemon <pollita@php.net> wrote:
>
> I was originally planning to just do this since I thought it'd be
> non-controversial, but while implementing I discovered some gotchas, so I'm
> putting it to the group for discussion. Please give attention to the
> "Backward Incompatible Changes" section.
>
> https://wiki.php.net/rfc/sodium.argon.hash
>
> -Sara