5 ms·
Most environments don't have an implementation for it yet The speed with which environments actually got implementations of previous secure algorithms was half
by technion 11y ago
Most environments don't have an implementation for it yet
The speed with which environments actually got implementations of previous secure algorithms was half the problem with their use, but I think Argon2 has this nailed. The README now links bindings for Go, Haskell, JavaScript, JVM, Lua, OCaml, Python, Ruby and Rust.
Disclaimer: I wrote the Ruby one.
https://github.com/P-H-C/phc-winner-argon2 https://github.com/P-H-C/phc-winner-argon2
- slavik81 11y agoI don't trust them. The various language bindings are maintained by random people who have gone through no particular vetting, and their code is not formally reviewed by anyone. When I started looking through the node bindings, I found a number of minor bugs and a critical issue that left ~1% of passwords vulnerable. I trust that the C developers do a good job, but phc-winner-argon2 does not appear to have ever made a formal release. Is master really always perfect? It's not ready yet.