Re: Server migration, password scheme/hashing, argon2i, argon2d, argon2id, sha512, sha512-crypt, tiger2, salt?

2023-06-24 Thread Robert Lister
Should work then if you have roundcube 1.6.x and php8.2 which is also the bookworm package version. Depends on your server spec / number of users if you use argon2 over bcrypt. One approach might be to just migrate all users to BLF-CRYPT anyway, and then set the recommended dovecot member

Re: Server migration, password scheme/hashing, argon2i, argon2d, argon2id, sha512, sha512-crypt, tiger2, salt?

2023-06-24 Thread David Mehler
Hello, Thanks. The other utility I would be using is the Roundcube webmail password plugin. Still trying to figure the best option. More opinions? Thanks. Dave. On 6/24/23, Robert Lister wrote: > > I did a similar upgrade, and now in the process of migrating from > SHA512-CRYPT > to BLF-CRYPT

Re: Server migration, password scheme/hashing, argon2i, argon2d, argon2id, sha512, sha512-crypt, tiger2, salt?

2023-06-24 Thread Robert Lister
I did a similar upgrade, and now in the process of migrating from SHA512-CRYPT to BLF-CRYPT with an appropriately set rounds, as I think the default rounds is a little low. A good write-up on migrating passwords and calculating the rounds: https://kaworu.ch/blog/2016/04/20/strong-crypt-schem