Argon2id should be the default about argon2-cffi HOT 5 CLOSED

Hm yeah, I guess I’ll have to build hash flexibility (that’s the wrong word, isn’t it :)) into PasswordHasher and update the docs.

from argon2-cffi.

Yep!

• Default to Argon2id
• time_cost=1
• memory_cost=32*1024 (i.e. 32 MiB)
• parallelism=len(os.sched_getaffinity(0))

from argon2-cffi.

Yeah I’ll try to read myself thru the RFC on the weekend. I’ve pinged Django about it too since they use the low-level functions.

from argon2-cffi.

I have started working on that in #34 but I don’t think I’m comfortable to change the other default parameters .

from argon2-cffi.

memory_cost is arbitrary, the others are sane defaults. A time_cost > 1 doesn't make much sense for password hashing and having parallelism = number of cores is quite obvious. Anyway, more than hardcoded default arguments, we need an helper function that, given a time constraint, returns optimal parameters. That's a good one: https://gitlab.com/cryptsetup/cryptsetup/blob/master/lib/crypto_backend/pbkdf_check.c#L202

from argon2-cffi.