#34017: Mention that when using Argon2PasswordHasher, this means Argon2id gets
used
-------------------------------------+-------------------------------------
Reporter: dash137 | Owner: nobody
Type: | Status: new
Cleanup/optimization |
Component: | Version: 4.1
Documentation | Keywords: Argon2 Argon2id
Severity: Normal | hashing algorithm password
Triage Stage: | management
Unreviewed | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-------------------------------------+-------------------------------------
In the documentation page on "Password management in Django", the section
on Argon2 should mention that with the settings described there, the
specific algorithm that gets actually used is the variant **Argon2id**.
Namely, one should not have to look in another place to ascertain which
precise algorithm gets used when one makes the changes described there (as
it's quite important to know for sure that one will indeed be using
Argon2id instead of any other variant out there).
Link to the documentation section concerned:
https://docs.djangoproject.com/en/4.1/topics/auth/passwords/#using-argon2
-with-django
Currently, the fact that Argon2id is indeed the default in Django (when
using Argon2), is to my knowledge only mentioned here:
https://docs.djangoproject.com/en/4.1/releases/3.2/
--
Ticket URL: <https://code.djangoproject.com/ticket/34017>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/0107018345b5084e-84d512e2-1798-447f-bfa7-e50849a13f23-000000%40eu-central-1.amazonses.com.
