Argon2

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Ideas Centre
Post Reply
User avatar
John connor
Registered User
Posts: 2049
Joined: Fri Nov 14, 2014 5:14 pm
Location: U S Of A
Name: Aaron
Contact:

Argon2

Post by John connor » Fri Aug 31, 2018 7:09 am

I was reading about Bcrypt and other hash functions and read about Argon2. It looks pretty decent and was wondering if phpBB has any plans for its implementation? :?:

User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10334
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: Argon2

Post by Noxwizard » Sat Sep 01, 2018 3:59 am

Support for Argon2i has already been added for phpBB 3.3.0: https://tracker.phpbb.com/browse/PHPBB3-15646 & https://github.com/phpbb/phpbb/pull/5211
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.

User avatar
John connor
Registered User
Posts: 2049
Joined: Fri Nov 14, 2014 5:14 pm
Location: U S Of A
Name: Aaron
Contact:

Re: Argon2

Post by John connor » Sat Sep 01, 2018 11:34 am

So I take it in order to get an Argon2 hash you have to change your password?

User avatar
John connor
Registered User
Posts: 2049
Joined: Fri Nov 14, 2014 5:14 pm
Location: U S Of A
Name: Aaron
Contact:

Re: Argon2

Post by John connor » Mon Apr 15, 2019 4:32 am

So I don't understand what any of this means. https://github.com/phpbb/phpbb/pull/5211

Is there or isn't there Argon2 capability in phpBB 3.2.5 now or not? If so, I'll reenter my password to take advantage of its hashing capability and inform my users to do the same. I'll even do it on this site. Thanks.

Another thing I don't understand is whether you need PHP 7.2 or not to use it which I think you do. Also, does my host have to also have something enabled server side to take advantage of it? I'm actually using PHP 7.2 now come to think of it.

This might sound like a dumb question, but I just want to be sure.

Edit-


OMG!, 3.3.0! I read that wrong. So I take it 3.2.5 doesn't have it yet.

User avatar
david63
Registered User
Posts: 16060
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Argon2

Post by david63 » Mon Apr 15, 2019 5:45 am

The way I read that link is that it will be in phpBB 4.0
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

User avatar
John connor
Registered User
Posts: 2049
Joined: Fri Nov 14, 2014 5:14 pm
Location: U S Of A
Name: Aaron
Contact:

Re: Argon2

Post by John connor » Mon Apr 15, 2019 7:47 am

Oh my god. :lol: Well, I guess I have a long way to go.

User avatar
kinerity
Community Team Member
Community Team Member
Posts: 2228
Joined: Mon Sep 01, 2014 1:00 am
Location: sudo rm -rf /
Name: Kailey Truscott
Contact:

Re: Argon2

Post by kinerity » Mon Apr 15, 2019 1:35 pm

david63 wrote:
Mon Apr 15, 2019 5:45 am
The way I read that link is that it will be in phpBB 4.0
Next line down reads
marc1706 added this to the 3.3.0-a1 milestone on Apr 22, 2018
Kailey Truscott - Community Team

User avatar
AmigoJack
Registered User
Posts: 5569
Joined: Tue Jun 15, 2010 11:33 am
Location: グリーン ヒル ゾーン
Contact:

Re: Argon2

Post by AmigoJack » Tue Apr 16, 2019 8:30 am

John connor wrote:
Mon Apr 15, 2019 4:32 am
Another thing I don't understand is whether you need PHP 7.2 or not to use it which I think you do.
As per the manual at least PHP 7.2 is needed for Argon2i, and 7.3 for Argon2id - in both cases PHP needs to be compiled with Argon2 support to begin with.
The worst thing about censorship is ███████████
Affin wrote:
Tue Nov 20, 2018 9:51 am
The problem is probably not my English but you do not want to understand correctly.
...
We will not come anybody anyway, nevertheless, it's best to shit this.

User avatar
david63
Registered User
Posts: 16060
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Argon2

Post by david63 » Tue Apr 16, 2019 9:00 am

kinerity wrote:
Mon Apr 15, 2019 1:35 pm
david63 wrote:
Mon Apr 15, 2019 5:45 am
The way I read that link is that it will be in phpBB 4.0
Next line down reads
marc1706 added this to the 3.3.0-a1 milestone on Apr 22, 2018
But as we all know virtually all new features that were originally planned for 3.3 have been deferred to 4.0
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

Post Reply

Return to “phpBB Discussion”