Using SHA256/512 for SQL based password

[Marc Weustink]

Aki Tuomi via dovecot wrote:
> 
> On 17.2.2019 10.46, Aki Tuomi via dovecot wrote:
>>
>>> On 17 February 2019 at 10:38 Odhiambo Washington via dovecot < 
>>> dovecot at dovecot.org <mailto:dovecot at dovecot.org>> wrote:
>>>
>>>
>>> On Sun, 17 Feb 2019 at 11:34, Marc Weustink via dovecot < 
>>> dovecot at dovecot.org <mailto:dovecot at dovecot.org>>
>>> wrote:
>>>
>>>> Jean-Daniel Dupas via dovecot wrote:
>>>> >
>>>> >
>>>> >> Le 13 févr. 2019 à 14:54, Robert Moskowitz via dovecot
>>>> >> < dovecot at dovecot.org <mailto:dovecot at dovecot.org> <mailto: 
>>>> dovecot at dovecot.org <mailto:dovecot at dovecot.org>>> a écrit :
>>>> >>
>>>> >>
>>>> >>
>>>>
>>>> >>> ARGON2 support is added in dovecot v2.3. It also needs to be 
>>>> enabled
>>>> >>> when compiling dovecot, so varying from packagers it might or 
>>>> not be
>>>> >>> available. The CRYPT ones are available if crypt(3) supports 
>>>> them. In
>>>> >>> dovecot v2.3 we have added bcrypt support regardless of crypt(3)
>>>> support.
>>>> >>
>>>> >> CentOS7 is on dovecot 2.2.36:
>>>> >>
>>>> >> # doveadm pw -s ARGON2-CRYPT -p secret
>>>> >> Fatal: Unknown scheme: ARGON2-CRYPT
>>>> >> # doveadm pw -s ARGON2 -p secret
>>>> >> Fatal: Unknown scheme: ARGON2
>>>> >>
>>>> >> I tend to stay with the distro's rpms and not take on building and
>>>> >> maintaining myself.
>>>> >
>>>>> And for the record, the hash names are ARGON2I and ARGON2ID (see 
>>>>> doveadm
>>>>> pw -l )
>>>>> With dovecot from the dovecot.org < http://dovecot.org> repo:
>>>>> # doveadm pw -s ARGON2I -p secret
>>>> {ARGON2I}$argon2i$v=19$m=32768,t=4,p=1$bt96TSr3nVrho2SRhnNP0A$h7LYiqkw/4s6d1d+0Xpe+VUE3aISPnkYq/R7QqPRntk 
>>>>
>>>> Also from dovecot.org < http://dovecot.org> repo:
>>>> doveadm pw -s ARGON2I -p secret
>>>> Fatal: Unknown scheme: ARGON2I
>>>> ????
>>>> Marc
>>>
>>> It works for me over here:
>>>
>>> [wash at waridi ~]#/opt/dovecot2.3/bin/doveadm pw -s ARGON2I -p secret
>>> {ARGON2I}$argon2i$v=19$m=32768,t=4,p=1$9pggnQBea9F3h3O31HoJEA$0zZZgwEuMRVZ3Mc/v6ckpalzVRVCr+GLBWnb8OrgsxU 
>>>
>>>
>>>
>>> -- 
>>> Best regards,
>>> Odhiambo WASHINGTON,
>>> Nairobi,KE
>>> +254 7 3200 0004/+254 7 2274 3223
>>> "Oh, the cruft.", grep ^[^#] :-)
>>
>> I'll check next week if and why argon is missing from ce packages.
>> ---
>> Aki Tuomi
> 
> Marc,
> 
> ARGON2 is supported only on Debian Stretch and Ubuntu 18 for dovecot, 
> due to libsodium.

Ah, thanks for the clarification. Still running Ubuntu 16 here.

Marc