Add support for Argon2 password hashing
authorMax Semenik <maxsem.wiki@gmail.com>
Tue, 4 Dec 2018 07:46:38 +0000 (23:46 -0800)
committerMax Semenik <maxsem.wiki@gmail.com>
Sun, 10 Feb 2019 10:20:52 +0000 (02:20 -0800)
commit292e13edc58af5e712c00da68709a6a76cb5f9f9
tree31d272d2ce6b70f0698c40809463993c61ea2496
parentd056d4c273a069d572ceb2160346ee697d7b87de
Add support for Argon2 password hashing

So far, everything we had was vulnerable to newest advances in
GPU cracking and timing side-channel attacks. Argon2 was designed
specifically to address these problems.

Unfortunately, PHP support is lagging, with some builds missing
Argon2id or even Argon2i.

Change-Id: Ifdf648f5d8a734a663e630286724a6d0a87c7510
RELEASE-NOTES-1.33
autoload.php
includes/DefaultSettings.php
includes/password/Argon2Password.php [new file with mode: 0644]
includes/password/Password.php
tests/phpunit/includes/password/Argon2PasswordTest.php [new file with mode: 0644]
tests/phpunit/includes/password/EncryptedPasswordTest.php
tests/phpunit/includes/password/PasswordTest.php
tests/phpunit/includes/password/PasswordTestCase.php