View Issue Details

IDProjectCategoryView StatusLast Update
0005116unrealircdpublic2018-12-09 17:26
ReportersyzopAssigned To 
PrioritynormalSeverityfeatureReproducibilityN/A
Status acknowledgedResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0005116: add argon2 password hashing support
DescriptionAdd support for argon2id hashes in UnrealIRCd. Nice to have for people who still use passwords. Not a target for next release.
TagsNo tags attached.
3rd party modules

Activities

syzop

2018-07-14 17:10

administrator   ~0020211

For bcrypt we aim for 0.05sec if I'm not mistaken, so aim for the same with argon2id. Rounds should be at least 3 due to some weaknesses.

Should we ship libargon2 code as well?
At least have the option to build against system libargon2, whatever we decide.

syzop

2018-12-03 15:47

administrator   ~0020385

There's no reason for this to be a private bug. Changed to public :)

syzop

2018-12-09 17:25

administrator   ~0020399

commit a852b480d5627125fdd8d51d6934df469049e894 (HEAD -> unreal42, origin/unreal42)
Author: Bram Matthys <syzop@vulnscan.org>
Date: Sun Dec 9 17:22:12 2018 +0100

    Add support for Argon2 password hashes (argon2id).
    Also, make this the default for './unrealircd mkpasswd'.
    The Windows version also works.. I just need to create a new library
    package, will be done later today or tomorrow.
    https://bugs.unrealircd.org/view.php?id=5116

https://github.com/unrealircd/unrealircd/commit/a852b480d5627125fdd8d51d6934df469049e894

syzop

2018-12-09 17:26

administrator   ~0020400

Still to be done:
* Update Windows precompiled library package
* Update documentation
* Make sure this works, not just on Linux and Windows but also on FreeBSD and other OS's.

Issue History

Date Modified Username Field Change
2018-07-14 17:07 syzop New Issue
2018-07-14 17:08 syzop Status new => acknowledged
2018-07-14 17:10 syzop Note Added: 0020211
2018-12-03 15:47 syzop View Status private => public
2018-12-03 15:47 syzop Note Added: 0020385
2018-12-09 17:25 syzop Note Added: 0020399
2018-12-09 17:26 syzop Note Added: 0020400