From the white paper https://password-hashing.net/argon2-specs.pdf https://password-hashing.net/argon2-specs.pdf: > Argon2i is more vulnerable to tradeoff atta

From the white paper https://password-hashing.net/argon2-specs.pdf https://password-hashing.net/argon2-specs.pdf: > Argon2i is more vulnerable to tradeoff attacks due to its data-independent addressing scheme. We applied the ranking algorithm to 3-pass Argon2i to calculate time and computational penalties. We found out that the memory reduction by the factor of 3 already gives the computational penalty of around 214. The 214 Blake2b cores would take more area than 1 GB of RAM (Section 2.1), thus prohibiting the adversary to further reduce the time-area product. We conclude that the time-area product cost for Argon2d can be reduced by 3 at best.