It seems that PHP, Symfony, ... have kept bcrypt as their preference even when A... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		gregoriol 3 months ago \| parent \| context \| favorite \| on: Evaluating Argon2 adoption and effectiveness in re... It seems that PHP, Symfony, ... have kept bcrypt as their preference even when Argon2 is available; is there a rationale there from such big projects?

upofadown 3 months ago | [–]

There is some thought that bcrypt is better than Argon2 for run times less than a second. So passwords in other words.

tptacek 3 months ago | [–]

bcrypt is fine. scrypt is fine. Argon2 is fine. Even PBKDF2, in most configurations, is fine. You can basically just put them on a board and throw a dart.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact