Why Hacker News recommends it
4 comments from 1 distinct recommending reader, between 2020 and 2023.
- Recommends
In general it is is not true that Argon2 should be recommended over bcrypt. Even even some of the people on the experts panel for the PHC (where Argon2 won) won’t recommend Argon2 over Bcrypt: twitter.com/TerahashCorp/status/1155129… Looks like for the typical case (~200ms calculating the hash) bcrypt beats argon2. I guess that’s what I understand from those discussions, I’m not an expert by any means. It is related with cache hardness: twitter.com/Sc00bzT/status/114996367506…
How To Safely Store A Password (2010)Read the thread - Cites it
According to one of the experts on the panel of the Password Hashing Competition, Argon2 is actually weaker than bcrypt twitter.com/TerahashCorp/status/1155129… I'm not an expert, but I'm really curious to hear more. It's especially weird given I've heard nothing but good things about Argon2 otherwise.
Cryptographic Best PracticesRead the thread - Cites it
According to one of the experts on the panel of the Password Hashing Competition, Argon2 is actually weaker than bcrypt twitter.com/TerahashCorp/status/1155129… I'm not an expert, but I'm really curious to hear more. It's especially weird given I've heard nothing but good things about Argon2 otherwise.
PSA: Upgrade your LUKS key derivation functionRead the thread - Cites it
I am not a security expert, but this looks pretty useful: security.stackexchange.com/questions/19…... And that Twitter link (twitter.com/TerahashCorp/status/1155129…) leads here: password-hashing.net/ ... but, on that website, I could not find an explanation about why to use argon2 over bcrypt.
How To Safely Store A Password (2010)Read the thread