Hello, I'm using dovecot 2.3.4.1 on a Debian buster system. with Argon2ID password scheme, it's only possible to configure the parameters used for it via the generic -r option to "doveadm pw". A higher -r will increase time and memory comsumption. But on my dual core VM it always uses p=1. So it seems the needed threads can only be changed on compile time? Will there be in future a way to explicitly specify memory, time and threads needed for Argon2ID?
> On 16/08/2020 09:38 Felix Zielcke <fzielcke at z-51.de> wrote: > > > Hello, > > I'm using dovecot 2.3.4.1 on a Debian buster system. > > with Argon2ID password scheme, it's only possible to configure the > parameters used for it via the generic -r option to "doveadm pw". > > A higher -r will increase time and memory comsumption. > But on my dual core VM it always uses p=1. > So it seems the needed threads can only be changed on compile time? > > Will there be in future a way to explicitly specify memory, time and > threads needed for Argon2ID?Dovecot allows you to use externally generated ARGON2ID hashes too if you want, just make sure you prefix them. There is no currently plans to introduce further tunings for argon2. Aki
Am Sonntag, den 16.08.2020, 12:27 +0300 schrieb Aki Tuomi:> > On 16/08/2020 09:38 Felix Zielcke <fzielcke at z-51.de> wrote: > > > > > > Hello, > > > > I'm using dovecot 2.3.4.1 on a Debian buster system. > > > > with Argon2ID password scheme, it's only possible to configure the > > parameters used for it via the generic -r option to "doveadm pw". > > > > A higher -r will increase time and memory comsumption. > > But on my dual core VM it always uses p=1. > > So it seems the needed threads can only be changed on compile time? > > > > Will there be in future a way to explicitly specify memory, time > > and > > threads needed for Argon2ID? > > Dovecot allows you to use externally generated ARGON2ID hashes too if > you want, just make sure you prefix them. > > There is no currently plans to introduce further tunings for argon2. > > AkiThanks Aki for the fast reply. I found now the argon2 binary. This works fine, except I need something else to generate a good salt. Felix