Re: [VOTE] Increasing the default BCrypt cost
| From: | steve at tobtu dot com | Date: | Thu, 05 Oct 2023 00:12:39 +0000 |
| Subject: | Re: [VOTE] Increasing the default BCrypt cost | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-121227@lists.php.net to get a copy of this message | ||
> On 09/22/2023 2:04 AM CDT Nicolas Grekas <nicolas.grekas+php@gmail.com> wrote:
>
>
> I was wondering if you considered also raising the Argon2 default cost? Has
> this been discussed?
>
Argon2 defaults are actually quite high at a theoretical speed of ~1.3 kH/s/GPU
(960,000,000,000/(64*1024^2)/(3*4-1) or in general bandwidth/(m*1024)/(3*t-1)). The actual speeds
are likely half that or less because of GPU memory size being the limiting factor. Note "<10
kH/s/GPU" is considered good.