generating secure ARGON2ID passwords

Felix Zielcke fzielcke at z-51.de
Sun Aug 16 17:54:28 EEST 2020


Am Sonntag, den 16.08.2020, 12:27 +0300 schrieb Aki Tuomi:
> > On 16/08/2020 09:38 Felix Zielcke <fzielcke at z-51.de> wrote:
> > 
> >  
> > Hello,
> > 
> > I'm using dovecot 2.3.4.1 on a Debian buster system.
> > 
> > with Argon2ID password scheme, it's only possible to configure the
> > parameters used for it via the generic -r option to "doveadm pw".
> > 
> > A higher -r will increase time and memory comsumption.
> > But on my dual core VM it always uses p=1.
> > So it seems the needed threads can only be changed on compile time?
> > 
> > Will there be in future a way to explicitly specify memory, time
> > and
> > threads needed for Argon2ID?
> 
> Dovecot allows you to use externally generated ARGON2ID hashes too if
> you want, just make sure you prefix them. 
> 
> There is no currently plans to introduce further tunings for argon2.
> 
> Aki

Thanks Aki for the fast reply.
I found now the argon2 binary. This works fine, except I need something
else to generate a good salt.

Felix



More information about the dovecot mailing list