The default values in current implementation matches PHP 7.3's defaults at the time it was implemented. PHP 7.4 appears to have new defaults and in some cases, hardcoded values depending on which library is used to handle Argon2.
Not sure whether it's really needed because the changes in PHPBB3-16266 prevent the cost from being set below the default values.
- is related to
-
PHPBB-16266 Error on clean install with PHP 7.4
- Closed
-
PHPBB-16878 Error in password_hash() with ARGON2 + Sodium & threadcount > 1
- Closed
- links to