./security/argon2, Password hash Argon2

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 20190702, Package name: argon2-20190702, Maintainer: pkgsrc-users

This is the reference C implementation of Argon2, the password-hashing
function that won the Password Hashing Competition (PHC).

You should use Argon2 whenever you need to hash passwords for
credential storage, key derivation, or other applications.

There are two main versions of Argon2, Argon2i and Argon2d. Argon2i
is the safest against side-channel attacks, while Argon2d provides
the highest resistance against GPU cracking attacks.

Argon2i and Argon2d are parametrized by

* A time cost, which defines the amount of computation realized
and therefore the execution time, given in number of iterations
* A memory cost, which defines the memory usage, given in kibibytes
* A parallelism degree, which defines the number of parallel threads


Required to build:
[pkgtools/cwrappers]

Master sites:


Version history: (Expand)


CVS history: (Expand)


   2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605)
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606)
Log message:
security: Remove SHA1 hashes for distfiles
   2019-08-07 14:58:49 by Nia Alarie | Files touched by this commit (4)
Log message:
argon2: Update to 20190702

Add a pkg-config file.
   2019-05-27 03:17:21 by Maya Rashish | Files touched by this commit (2)
Log message:
argon2: don't test if opt.c can build with -march=native.

Avoid a situation where a build host can use SSE2, but opt.c is then
compiled without SSE2 support (which fails).

Also check for CFLAGS for this compile test while here.

amend comment: we avoid -march=native not because of netbsd, but because
it results in shiny package builders creating packages not usable by
some users with older machines.

PR pkg/54238: security/argon2 build fails on i386-current (8.99.41)
   2018-01-10 10:36:54 by Adam Ciarcinski | Files touched by this commit (2)
Log message:
Better -install_name on Darwin
   2017-12-30 12:34:12 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
argon2: updated to 20171227

20171227:
Added ABI version number
AVX2/AVX-512F optimizations of BLAMKA
Set Argon2 version number from the command line
New bindings
Minor bug and warning fixes (no security issue)
   2017-02-23 17:55:07 by Klaus Klein | Files touched by this commit (3)
Log message:
Install the manual page and the header file; throw in one buildlink3.mk
for good measure.

Bump PKGREVISION.
   2017-02-21 23:00:51 by Klaus Klein | Files touched by this commit (5)
Log message:
Update argon2 to 20161029.

# 20161029

* Argon2id added
* Better documentation
* Dual licensing CC0 / Apache 2.0
* Minor bug fixes (no security issue)

# 20160406

* Version 1.3 of Argon2
* Version number in encoded hash
* Refactored low-level API
* Visibility control for library symbols
* Microsoft Visual Studio solution
* New bindings
* Minor bug and warning fixes (no security issue)

# 20151206

* Python bindings
* Password read from stdin, instead of being an argument
* Compatibility FreeBSD, NetBSD, OpenBSD
* Constant-time verification
* Minor bug and warning fixes (no security issue)