Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FR: Password hashing in PHP 7.2 using Argon2 #22347

Closed
Jamesking56 opened this issue Dec 7, 2017 · 2 comments
Closed

FR: Password hashing in PHP 7.2 using Argon2 #22347

Jamesking56 opened this issue Dec 7, 2017 · 2 comments

Comments

@Jamesking56
Copy link

Argon2 is a new password hashing algorithm added to PHP 7.2. It is more secure and faster than Bcrypt.

Is it possible to expose this functionality in Laravel? One way I believe this can be done with backward compatibility is to set which hashing algorithm to use using either a config value or env. Some Laravel apps will already have hashed passwords in the DB using Bcrypt.

@devcircus
Copy link
Contributor

See #21885

@rs-sliske
Copy link

Not against this being added, but I didnt think being "faster" was a good thing when it came to password hashing, surely that just means a brute force attack takes less time?

(A quick look into Argon and it seems the time is customizable by choosing how many iterations you want just like bcrypt can, just not sure password algorithm should be based on being fast)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants