]> git.ipfire.org Git - thirdparty/openldap.git/commit
ITS#8575 Implement argon2 password hashing as a module
authorSimon Levermann <simon@slevermann.de>
Wed, 25 Jan 2017 14:11:06 +0000 (15:11 +0100)
committerQuanah Gibson-Mount <quanah@openldap.org>
Tue, 21 Apr 2020 19:40:16 +0000 (19:40 +0000)
commit2210a3bd8432d4d43d3ef5459ca71cefff679392
tree801059be9a9ed33bb5bd361fa4297fc0773708a6
parent0daf80129a7e3fa9ac10738fb8b86dfcdfa6eb09
ITS#8575 Implement argon2 password hashing as a module

This change implements argon2, which won the Password Hashing
Competition (https://password-hashing.net/) as a contrib-module in order
to provide a modern password hashing alternative in openldap. The
currently available password hashing algorithms are relatively old, and
modern hardware, especially GPUs can compute quite a few (ranging from
tens of thousands to millions) of hashes per second. Argon2 was designed
to withstand such attacks.

This implementation uses the default work factors used in the argon2
command line client, but the resulting hashes are stored in a way that
would allow retroactive changes to these values, or even exposing them
as configuration in the module.
contrib/slapd-modules/passwd/argon2/Makefile [new file with mode: 0644]
contrib/slapd-modules/passwd/argon2/README [new file with mode: 0644]
contrib/slapd-modules/passwd/argon2/pw-argon2.c [new file with mode: 0644]