Re: [Discussion] Changing PASSWORD_DEFAULT to Argon2

From: Date: Fri, 25 Sep 2026 06:59:43 +0000
Subject: Re: [Discussion] Changing PASSWORD_DEFAULT to Argon2
References: 1 2 3 4 5 6  Groups: php.internals 
Request: Send a blank email to internals+get-132628@lists.php.net to get a copy of this message
On Sun, Sep 20, 2026, at 16:44, Jakub Zelenka wrote: > On Sun, Sep 20, 2026 at 3:49 PM Andrey Andreev <narf@devilix.net> wrote: >> On Sat, Sep 19, 2026 at 11:00 PM Anton Smirnov <sandfox@sandfox.me> wrote: >>> If for a moment we assume Argon2id is better, can we rely on OpenSSL for default? > > OpenSSL is an external shared library so it cannot be always enabled. Is it a possibility to set argon2 as default when PHP is compiled with OpenSSL, and bcrypt otherwise? Regards, Sjoerd Langkemper

« previous php.internals (#132628) next »