Argon2

<p>Argon2 is a <a href="/facts/Key_derivation_function/3jL2jTTb">key derivation function</a> that was selected as the winner of the 2015 <a href="/facts/Password_Hashing_Competition/tufKsBYs">Password Hashing Competition</a>. It was designed by <a href="/facts/Alex_Biryukov/7kbdNe6r">Alex Biryukov</a>, Daniel Dinu, and <a href="/facts/Dmitry_Khovratovich/2uCPy7lo">Dmitry Khovratovich</a> from the <a href="/facts/University_of_Luxembourg/JR9qcyB6">University of Luxembourg</a>. The reference implementation of Argon2 is released under a <a href="/facts/Creative_Commons_CC0/6AV3V7UJ">Creative Commons CC0</a> license (i.e. <a href="/facts/Public_domain/YWKMDKw4">public domain</a>) or the <a href="/facts/Apache_License/5AeIjas8">Apache License 2.0</a>, and provides three related versions:
</p>
<ul><li>Argon2d maximizes resistance to GPU <a href="/facts/Password_cracking/cKnFAosH">cracking attacks</a>. It accesses the memory array in a password dependent order, which reduces the possibility of <a href="/facts/Time%25E2%2580%2593memory_trade-off/zMRR67q9">time–memory trade-off</a> (TMTO) attacks, but introduces possible <a href="/facts/Side-channel_attack/2B1dfBty">side-channel attacks</a>.</li>
<li>Argon2i is optimized to resist side-channel attacks. It accesses the memory array in a password independent order.</li>
<li>Argon2id is a hybrid version. It follows the Argon2i approach for the first half pass over memory and the Argon2d approach for subsequent passes. <a href="/facts/RFC_(identifier)/esftTvE7">RFC</a> <a href="https://www.rfc-editor.org/rfc/rfc9106">9106</a> recommends using Argon2id if you do not know the difference between the types or you consider side-channel attacks to be a viable threat.</li></ul>
<p>All three modes allow specification by three parameters that control:
</p>
<ul><li>execution time</li>
<li>memory required</li>
<li>degree of parallelism</li></ul>

Argon2 open-in-new

Argon2