4 ms·

This paper also describes an attack on Argon2, which lowers the amount of memory required by an attacker.