Argon2 support?

70 views

Skip to first unread message

Hunter Trujillo

unread,

Apr 26, 2016, 1:33:01 PM4/26/16

to Google Identity Toolkit

The best password hashing algorithm as of last year is Argon2. It apparently won a competition and people are really proud and confident about that. I'd like to be able to supply it to my users, but I'm not sure if you do, looking at this line of code:

https://github.com/google/identity-toolkit-node-client/blob/53fcc596925d58d2580a2f90b5b8844a0c68a35c/lib/gitkitclient.js#L168

Would you be able to provide that?

Also, would you mind updating the dependencies on that module? Thanks!

Jin Liu

unread,

May 8, 2016, 12:54:50 PM5/8/16

to Google Identity Toolkit

Hi Hunter,

Thanks for the post. It often takes quite some time to thoroughly inspect new crypto algorithms and implementations before they can be widely used. If you use Google Identity Toolkit, your users' password hashes are safely stored in Google infrastructure with multiple level of crypto security protections. You do not need to worry about the user password any more.

Regarding the dependencies of Google Identity Toolkit nodejs module, which library would you like a newer version?