New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature request: Add secret/key #5

Open

My1 opened this issue Jan 16, 2018 · 1 comment

My1 commented Jan 16, 2018

https://tools.ietf.org/html/draft-irtf-cfrg-argon2-03#section-3.1

Argon 2 Provides the user with the ability to add a "secret value" or "key" to the hash, in addition to the already existing salt.

This can perfectly serve as a pepper for further securing the password against leaks (attacker gains access to database, SQL injection, whatever)

Owner

charlesportwoodii commented Jan 16, 2018 •

edited

There's an outstanding issue upstream I am waiting for a determination on P-H-C/phc-winner-argon2#222.

In the meantime, libsodium supercedes this library. I would recommend libsodium over this now that argon2 is supported there.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment