#34017: Mention that when using Argon2PasswordHasher, this means Argon2id gets
used
-------------------------------------+-------------------------------------
Reporter: David Schultz | Owner: nobody
Type: | Status: new
Cleanup/optimization |
Component: Documentation | Version: 4.1
Severity: Normal | Resolution:
Keywords: Argon2 Argon2id | Triage Stage: Accepted
hashing algorithm password |
management |
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Mariusz Felisiak):
* stage: Unreviewed => Accepted
Comment:
Agreed. Would you like to prepare a patch? It should be enough to mention
`Argon2id` in topics, e.g.
{{{#!diff
diff --git a/docs/topics/auth/passwords.txt
b/docs/topics/auth/passwords.txt
index 25c98bf786..43607d6478 100644
--- a/docs/topics/auth/passwords.txt
+++ b/docs/topics/auth/passwords.txt
@@ -83,7 +83,8 @@ Using Argon2 with Django
Argon2_ is the winner of the 2015 `Password Hashing Competition`_, a
community
organized open competition to select a next generation hashing algorithm.
It's
designed not to be easier to compute on custom hardware than it is to
compute
-on an ordinary CPU.
+on an ordinary CPU. The default variant for the Argon2 password hasher is
+Argon2id.
Argon2_ is not the default for Django because it requires a third-party
library. The Password Hashing Competition panel, however, recommends
immediate
}}}
--
Ticket URL: <https://code.djangoproject.com/ticket/34017#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/0107018345c004fe-f725830c-0457-465f-8eb5-01facdf01bfa-000000%40eu-central-1.amazonses.com.