Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add explicit hash command for Argon2 (allowing the customization of all parameters) #22

Open
cipriancraciun opened this issue Dec 28, 2023 · 2 comments

Comments

@cipriancraciun
Copy link
Member

No description provided.

@hakavlad
Copy link

allowing the customization of all parameters

Just an opinion:

allowing the user to configure things like the encryption algorithm and Argon2 parameters is a weakness rather than a strength of the application. That's why most encryption programs aren't configurable

samuel-lucas6/Kryptor#10

@cipriancraciun
Copy link
Member Author

[...] allowing the user to configure things like the encryption algorithm and Argon2 parameters is a weakness rather than a strength of the application [...]

Indeed, but it also depends on the context.

Thus, to put things into perspective: z-tokens is an umbrella project for various password, hash, and encryption tools; one of these tools is z-tokens hash that serves as a one-stop-shop for data hashing, from CRC, non-cryptographic hashes (such as Xxh3), through MD5 (and other currently unsafe algorithms), to Blake3 and SHA-3, and finally to Scrypt or Argon2 that if you squint hard enough look like hashes.

Thus, if one uses the z-tokens hash tool, one is well aware of what one wants to achieve, thus exporting various low-level features (like stating the seed for various hashes, or the parameters for Scrypt or Argon2) helps when needed.

Where would one use this tool? Mainly in bash scripts to quickly prototype stuff, or when trying to be compliant with other implementations. Thus "security" isn't quite on the top of the list at this stage.


Moreover, if one needs Argon2 to hash some password into some cryptographic key, there is the z-tokens exchange password tool that does what you suggest (i.e. providing hard-coded parameters for the various algorithms, including Argon2).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants