-
-
Notifications
You must be signed in to change notification settings - Fork 782
Add support for argon2d and argon2i variants #2416
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for argon2d and argon2i variants #2416
Conversation
I am unsure what's causing the failures in the CI tests. They all appear to be a failing |
most likely they're flakes |
Any thoughts on these additions? This PR is a dependency to add argon2d/2i support to the Python cryptography project |
openssl/src/kdf.rs
Outdated
#[allow(clippy::too_many_arguments)] | ||
pub fn argon2id( | ||
fn argon2_helper( | ||
kdf_identifier: &'static [u8], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
for soundness this needs to be a &CStr
or something, otherwise you get buffer overread if you pass something without a trailing nul
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done @alex appreciate the review!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The c""
syntax is not compatible with our MSRV
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ahh, apologies - updated to use (the ugly) CStr::from_bytes_with_nul
Expose functionality of supplementary variants, Argon2d and Argon2i, as described in RFC 9106