Argon2::Password.verify_password can only verify passwords with default Salt lengths about ruby-argon2 HOT 7 CLOSED

It would appear that my concerns related only to creating a hash.
Given the position of encouraging people not to come up with their own salting scheme in the first place, I'm happy to stay firm on SALT_LEN as a hard coded input.

I'm pushing a fix now however that should allow it to verify existing hashes, which I've tested against your examples.

from ruby-argon2.

@micahhainline Given it's a bugfix, I will push a new release if no issues come up in another 24 hours.

from ruby-argon2.

Hi,

Thanks for this report. I'm going to take some time to look into an appropriate solution. Trying to mess with this has a knock-on effect of messing with the ENCODE_LEN constant, which exists in Ruby outside the C wrapper.

Being in this position would also involve messing with a recommended default, which I've been trying to discourage people from doing.

Regardless, let me look into a solution.

from ruby-argon2.

Any idea when we might see this in a release?

from ruby-argon2.

@technion wow! This is setting the bar for responsiveness! Thanks for turning it around so quickly!

from ruby-argon2.

@micahhainline No worries - it's a legit bug and can be fixed in a non-breaking way.

from ruby-argon2.

@micahhainline @asynchrony-ringo Version 1.1.1 has been tagged and pushed.

from ruby-argon2.