generating secure ARGON2ID passwords

Aki Tuomi aki.tuomi at open-xchange.com
Sun Aug 16 12:27:26 EEST 2020


> On 16/08/2020 09:38 Felix Zielcke <fzielcke at z-51.de> wrote:
> 
>  
> Hello,
> 
> I'm using dovecot 2.3.4.1 on a Debian buster system.
> 
> with Argon2ID password scheme, it's only possible to configure the
> parameters used for it via the generic -r option to "doveadm pw".
> 
> A higher -r will increase time and memory comsumption.
> But on my dual core VM it always uses p=1.
> So it seems the needed threads can only be changed on compile time?
> 
> Will there be in future a way to explicitly specify memory, time and
> threads needed for Argon2ID?

Dovecot allows you to use externally generated ARGON2ID hashes too if you want, just make sure you prefix them. 

There is no currently plans to introduce further tunings for argon2.

Aki


More information about the dovecot mailing list