Re: [RFC][DISCUSSION] Argon2 Password Hash

On Fri, 2016-08-05 at 07:47 -0500, Charles R. Portwood II wrote: > Hello Internals, > > Due to a couple issue with the original RFC's scope, the RFC for > introducing Argon2 as an alternative hashing algorithm for the > password_* > functions was closed shortly after starting on Monday. > > The following details were adjusted. and I would appreciate your > feedback > before re-opening the vote. > >    - The RFC scope was reduced to only cover inclusion in 7.2. This > RFC no >    longer proposes changes to PASSWORD_DEFAULT in 7.4. >    - Argon2d is not suitable for password hashing, and has been > removed to >    keep in line with the scope goals of the password_* functions. >    - The configure flag was changed to --with-argon2 to >    --with-password-argon2 to further clarify the scope of this RFC. > > Further rationale for these items is provided in the RFC itself. > > The RFC is available at: > https://wiki.php.net/rfc/argon2_password_has > h. > > Thanks to those who emailed me directly to discuss the matter on > Monday, > and for your feedback on these changes. > > *Charles R. Portwood II* Argon2 also supports keyed hashes and associated data, but seen no mention of either. Jared