Argon2 Specification Referenz
Detailed Referenz für Argon2 (Argon2d, Argon2i, Argon2id), der Passwort Hashing Competition winner.
Algorithm Variants
Argon2d uses data-dependent memory access, maximizing resistance to time-memory tradeoffs but vulnerable to side-channel attacks. Argon2i uses data-independent access, resisting side-channel attacks but with weaker TMTO resistance. Argon2id is a hybrid: first half of passes use data-independent, rest data-dependent. Argon2id is recommended by RFC 9106 for general-purpose password hashing.
- Argon2d
- Data-dependent access
- Argon2i
- Data-independent access
- Argon2id
- Hybrid, recommended
best TMTO resistanceside-channel safeRFC 9106 defaultParameters
The memory parameter m specifies the required memory in kibibytes. The time parameter t controls the number of passes over the memory. Parallelism p sets the number of parallel lanes. The salt must be at least 16 bytes and unique per password. Typical recommended values are m=65536 (64 MiB), t=3, p=4 for interactive login. The output length is configurable, typically 32 bytes.
- memory m
- Required RAM in KiB
- time t
- Number of passes
- parallelism p
- Parallel lanes
65536 = 64 MiB3 typical4 typical