Re: Using SHA256/512 for SQL based password

On 17.2.2019 10.46, Aki Tuomi via dovecot wrote:

...

On 17 February 2019 at 10:38 Odhiambo Washington via dovecot < dovecot@dovecot.org mailto:dovecot@dovecot.org> wrote:

On Sun, 17 Feb 2019 at 11:34, Marc Weustink via dovecot < dovecot@dovecot.org mailto:dovecot@dovecot.org> wrote:

...

Jean-Daniel Dupas via dovecot wrote:

...

...

Le 13 févr. 2019 à 14:54, Robert Moskowitz via dovecot < dovecot@dovecot.org mailto:dovecot@dovecot.org

dovecot@dovecot.org mailto:dovecot@dovecot.org>> a écrit :

...

...

...

...

...

ARGON2 support is added in dovecot v2.3. It also needs to be enabled when compiling dovecot, so varying from packagers it might or not be available. The CRYPT ones are available if crypt(3) supports them. In dovecot v2.3 we have added bcrypt support regardless of crypt(3) support.

CentOS7 is on dovecot 2.2.36:

# doveadm pw -s ARGON2-CRYPT -p secret Fatal: Unknown scheme: ARGON2-CRYPT # doveadm pw -s ARGON2 -p secret Fatal: Unknown scheme: ARGON2

I tend to stay with the distro's rpms and not take on building and maintaining myself.

And for the record, the hash names are ARGON2I and ARGON2ID (see doveadm pw -l ) With dovecot from the dovecot.org < http://dovecot.org> repo: # doveadm pw -s ARGON2I -p secret {ARGON2I}$argon2i$v=19$m=32768,t=4,p=1$bt96TSr3nVrho2SRhnNP0A$h7LYiqkw/4s6d1d+0Xpe+VUE3aISPnkYq/R7QqPRntk

Also from dovecot.org < http://dovecot.org> repo: doveadm pw -s ARGON2I -p secret Fatal: Unknown scheme: ARGON2I ???? Marc

It works for me over here:

[wash@waridi ~]#/opt/dovecot2.3/bin/doveadm pw -s ARGON2I -p secret {ARGON2I}$argon2i$v=19$m=32768,t=4,p=1$9pggnQBea9F3h3O31HoJEA$0zZZgwEuMRVZ3Mc/v6ckpalzVRVCr+GLBWnb8OrgsxU

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

I'll check next week if and why argon is missing from ce packages. 

Aki Tuomi

Marc,

ARGON2 is supported only on Debian Stretch and Ubuntu 18 for dovecot, due to libsodium.

Aki