3 ms·

The TL;DR seems to be "use libsodium". I'd love to see some discussion and first hand experiences on that, since I'm no crypto expert.

• creshal 11y ago
  Libsodium is a well-understood, modern crypto library that's slowly becoming the gold standard in applied crypto. It's very hard to find a better library for any given purpose, and very, very easy to use most of those alternatives wrong. The other TL;DR is: Argon2 is not yet ready and bcrypt is good enough that moving to scrypt is not necessary. That's a bit surprising to me, I didn't realize that scrypt's safety margin over bcrypt is that small in practice.
  • sarciszewski 11y ago
    > Argon2 is not yet ready and bcrypt is good enough that moving to scrypt is not necessary. I'd like to also specify that Argon2's perceived lack of readiness is, well, perceived. The attack mentioned in the article might prove to not be worth mitigating, or it will lead to a new flavor (dubbed "Argon2x" here as a hypothetical nickname).
    • creshal 11y ago
      > The attack mentioned in the article might prove to not be worth mitigating, or it will lead to a new flavor So, it's not clear whether you can keep using Argon2i or should use Argon2x instead. In other words: It's not yet ready.