Re: [RFC][DISCUSSION] Argon2 Password Hash

> > Argon2 also supports keyed hashes and associated data, but seen no > mention of either. > Jared Hi Jared, This is a design decision to prevent changing the PHP API. The Argon2 reference library exposes two ways of working with Argon2 hashes, we can either use the Argon2_Context struct, or pass our data directly to the argon2_hash/verify functions. The former is the only way to provided a hash key and associated data. Since password_hash doesn't expose the salt is generates, and since password_verify doesn't accept an array options, it would be impossible to verify Argon2 hashes created with a hash key and associated data without changing the PHP API for that function. *Charles R. Portwood II*