Re: PASSWORD_DEFAULT value

From:	Tim Düsterhus	Date:	Wed, 06 Sep 2023 16:52:26 +0000
Subject:	Re: PASSWORD_DEFAULT value
References:	1	Groups:	php.internals
Request:	Send a blank email to internals+get-120996@lists.php.net to get a copy of this message

Hi On 9/6/23 18:08, Vinicius Dias wrote:

I was wondering here... Is there any reason for PASSWORD_DEFAULT's value not to be PASSWORD_ARGON2ID?

To the best of my knowledge Argon2 is not available in a "default" installation of PHP without including any external dependencies. Also Argon2 for settings that are reasonable for interactive authentication is worse than BCrypt according to: https://twitter.com/TerahashCorp/status/1155119064248913920 and https://twitter.com/TerahashCorp/status/1155129705034653698 Best regards Tim Düsterhus