3 ms·
> Argon2 is not yet ready and bcrypt is good enough that moving to scrypt is not necessary. I'd like to also specify that Argon2's perceived lack of readiness
by sarciszewski 11y ago
> Argon2 is not yet ready and bcrypt is good enough that moving to scrypt is not necessary.
I'd like to also specify that Argon2's perceived lack of readiness is, well, perceived. The attack mentioned in the article might prove to not be worth mitigating, or it will lead to a new flavor (dubbed "Argon2x" here as a hypothetical nickname).
- creshal 11y ago> The attack mentioned in the article might prove to not be worth mitigating, or it will lead to a new flavor So, it's not clear whether you can keep using Argon2i or should use Argon2x instead. In other words: It's not yet ready.