generating secure ARGON2ID passwords
    Aki Tuomi 
    aki.tuomi at open-xchange.com
       
    Sun Aug 16 12:27:26 EEST 2020
    
    
  
> On 16/08/2020 09:38 Felix Zielcke <fzielcke at z-51.de> wrote:
> 
>  
> Hello,
> 
> I'm using dovecot 2.3.4.1 on a Debian buster system.
> 
> with Argon2ID password scheme, it's only possible to configure the
> parameters used for it via the generic -r option to "doveadm pw".
> 
> A higher -r will increase time and memory comsumption.
> But on my dual core VM it always uses p=1.
> So it seems the needed threads can only be changed on compile time?
> 
> Will there be in future a way to explicitly specify memory, time and
> threads needed for Argon2ID?
Dovecot allows you to use externally generated ARGON2ID hashes too if you want, just make sure you prefix them. 
There is no currently plans to introduce further tunings for argon2.
Aki
    
    
More information about the dovecot
mailing list