Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-16342

Update Argon2 hashing costs

    XMLWordPrintable

Details

    • Improvement
    • Status: Unverified Fix (View Workflow)
    • Minor
    • Resolution: Fixed
    • 3.3.0
    • 3.3.1-RC1
    • None

    Description

      The default values in current implementation matches PHP 7.3's defaults at the time it was implemented. PHP 7.4 appears to have new defaults and in some cases, hardcoded values depending on which library is used to handle Argon2.

      Not sure whether it's really needed because the changes in PHPBB3-16266 prevent the cost from being set below the default values.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. PHPBB3-16266 Error on clean install with PHP 7.4

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. PHPBB3-16878 Error in password_hash() with ARGON2 + Sodium & threadcount > 1

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          links to

          Web Link Discussion post

          Web Link PHP RFC: Provide argon2i(d) implementations for password_hash() from ext/sodium

          Activity

            People

              Marc Marc
              JoshyPHP JoshyPHP
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: