From 466cbd5a1be7d274a45506add79c21e06ee53381 Mon Sep 17 00:00:00 2001 From: Rose Hogenson Date: Fri, 24 Oct 2025 15:18:39 -0700 Subject: Use argon2 for password hashing --- pwhash.go | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) (limited to 'pwhash.go') diff --git a/pwhash.go b/pwhash.go index 31f1487..dabafa7 100644 --- a/pwhash.go +++ b/pwhash.go @@ -1,17 +1,16 @@ package main import ( - "crypto/pbkdf2" - "crypto/sha256" "os" + "golang.org/x/crypto/argon2" "golang.org/x/term" ) -const defaultPBKDF2Iters = 35_000_000 +const defaultArgon2Memory = 64 * 1024 -func hashPassword(password string, salt []byte, iters int) ([]byte, error) { - return pbkdf2.Key(sha256.New, password, salt, iters, 32) +func hashPassword(password string, salt []byte, memory int) ([]byte, error) { + return argon2.IDKey([]byte(password), salt, 1, uint32(memory), 4, 32), nil } func termReadPassword() (string, error) { -- cgit v1.3.1