generating secure ARGON2ID passwords
Felix Zielcke
fzielcke at z-51.de
Sun Aug 16 17:54:28 EEST 2020
Am Sonntag, den 16.08.2020, 12:27 +0300 schrieb Aki Tuomi:
> > On 16/08/2020 09:38 Felix Zielcke <fzielcke at z-51.de> wrote:
> >
> >
> > Hello,
> >
> > I'm using dovecot 2.3.4.1 on a Debian buster system.
> >
> > with Argon2ID password scheme, it's only possible to configure the
> > parameters used for it via the generic -r option to "doveadm pw".
> >
> > A higher -r will increase time and memory comsumption.
> > But on my dual core VM it always uses p=1.
> > So it seems the needed threads can only be changed on compile time?
> >
> > Will there be in future a way to explicitly specify memory, time
> > and
> > threads needed for Argon2ID?
>
> Dovecot allows you to use externally generated ARGON2ID hashes too if
> you want, just make sure you prefix them.
>
> There is no currently plans to introduce further tunings for argon2.
>
> Aki
Thanks Aki for the fast reply.
I found now the argon2 binary. This works fine, except I need something
else to generate a good salt.
Felix
More information about the dovecot
mailing list