From b142b3711ff28816adc32d2985a9dead87bba14a Mon Sep 17 00:00:00 2001 From: EETagent Date: Mon, 31 Oct 2022 13:01:59 +0100 Subject: [PATCH] feat: improve argon2 security, (0.01s execution time in release mode, still fast) --- core/src/crypto.rs | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/core/src/crypto.rs b/core/src/crypto.rs index 82e05b1..cf95b2f 100644 --- a/core/src/crypto.rs +++ b/core/src/crypto.rs @@ -35,7 +35,11 @@ pub fn random_8_char_string() -> String { pub async fn hash_password( password_plain_text: String, ) -> Result> { - let argon_config = Argon2::default(); + let argon_config = Argon2::new( + argon2::Algorithm::Argon2i, + argon2::Version::V0x13, + argon2::Params::new(6000, 3, 10, None)?, + ); let hash = tokio::task::spawn_blocking(move || { let password = password_plain_text.as_bytes(); @@ -57,7 +61,11 @@ pub async fn verify_password( password_plaint_text: String, hash: String, ) -> Result> { - let argon_config = Argon2::default(); + let argon_config = Argon2::new( + argon2::Algorithm::Argon2i, + argon2::Version::V0x13, + argon2::Params::new(6000, 3, 10, None)?, + ); let result: Result = tokio::task::spawn_blocking(move || {