[VOTE] Argon2id in Password Hash

php.internals

Charles R. Portwood II

8 years ago
Hello Internals, The RFC for including Argon2id in password_* functions is now open for a vote. The RFC is available at https://wiki.php.net/rfc/argon2_password_hash_enhancements. Voting will be open until June 18th, 2018. Thank you. --- Charles R. Portwood II

Alice Wonder

8 years ago
On 06/06/2018 03:54 PM, Charles R. Portwood II wrote:
> Hello Internals, > > The RFC for including Argon2id in password_* functions is now open for a > vote. The RFC is available at > https://wiki.php.net/rfc/argon2_password_hash_enhancements. > > Voting will be open until June 18th, 2018. > > Thank you. > > --- > > Charles R. Portwood II >
I don't think I'm allowed to vote but I would say yes - it's already available via that sodium extension and I am already using it to replace older methods in other webapps (such as WordPress).

Charles R. Portwood II

8 years ago
Hello Internals, The RFC has been accepted 17-0 in favor of adding this to PHP 7.3. A merge request with the implementation is available at https://github.com/php/php-src/pull/1997 for review and merging into 7.3 when ready. Thanks, --- Charles R. Portwood II On Jun 6, 2018, 5:54 PM -0500, Charles R. Portwood II , wrote:

Christoph Becker

8 years ago
On 19.06.2018 at 17:12, Charles Portwood wrote:
> The RFC has been accepted 17-0 in favor of adding this to PHP 7.3. A merge request with the implementation is available at https://github.com/php/php-src/pull/1997 for review and merging into 7.3 when ready.
Thanks! You mean <https://github.com/php/php-src/pull/3311>, however, don't you?
-- Christoph M. Becker

Charles R. Portwood II

8 years ago
Hi Christoph, Yes, https://github.com/php/php-src/pull/3311 is the correct merge request. --- Charles R. Portwood II On Jun 19, 2018, 10:28 AM -0500, Christoph M. Becker <cmbecker69@gmx.de>, wrote: