#26635: "memory_cost" of Argon2PasswordHasher
--------------------------------------+--------------------
Reporter: danielfeng | Owner: nobody
Type: Cleanup/optimization | Status: new
Component: contrib.auth | Version: master
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
--------------------------------------+--------------------
The '''memory_cost''' doesn't seems to be consistent with the reference C
implementation (https://github.com/P-H-C/phc-winner-argon2), where the
'''m''' actually means "Sets the memory usage of 2^N KiB
(default 12)", not plain "KiB". I observed the latter definition in
'''argon2-cffi''' too and thus it could be due to that lib, but this is
really confusing, as other libraries (for example, the Ruby binding) are
consistent with the reference implementation. The problem of this
inconsistency is that the "plain" version is usually much bigger than the
"right" version and since there is no way to distinguish between the two,
once Django 1.10 is shipped, it would become really hard if it is decided
to use the "right" version in the future.
--
Ticket URL: <https://code.djangoproject.com/ticket/26635>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/053.ead2cd534e0b061e1d546c02fe3ce85e%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
