#34017: Mention that when using Argon2PasswordHasher, this means Argon2id gets 
used
-------------------------------------+-------------------------------------
     Reporter:  David Schultz        |                    Owner:  nobody
         Type:                       |                   Status:  new
  Cleanup/optimization               |
    Component:  Documentation        |                  Version:  4.1
     Severity:  Normal               |               Resolution:
     Keywords:  Argon2 Argon2id      |             Triage Stage:  Accepted
  hashing algorithm password         |
  management                         |
    Has patch:  0                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------
Changes (by Mariusz Felisiak):

 * stage:  Unreviewed => Accepted


Comment:

 Agreed. Would you like to prepare a patch? It should be enough to mention
 `Argon2id` in topics, e.g.
 {{{#!diff
 diff --git a/docs/topics/auth/passwords.txt
 b/docs/topics/auth/passwords.txt
 index 25c98bf786..43607d6478 100644
 --- a/docs/topics/auth/passwords.txt
 +++ b/docs/topics/auth/passwords.txt
 @@ -83,7 +83,8 @@ Using Argon2 with Django
  Argon2_ is the winner of the 2015 `Password Hashing Competition`_, a
 community
  organized open competition to select a next generation hashing algorithm.
 It's
  designed not to be easier to compute on custom hardware than it is to
 compute
 -on an ordinary CPU.
 +on an ordinary CPU. The default variant for the Argon2 password hasher is
 +Argon2id.

  Argon2_ is not the default for Django because it requires a third-party
  library. The Password Hashing Competition panel, however, recommends
 immediate
 }}}

-- 
Ticket URL: <https://code.djangoproject.com/ticket/34017#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/0107018345c004fe-f725830c-0457-465f-8eb5-01facdf01bfa-000000%40eu-central-1.amazonses.com.

Reply via email to