OpenLDAP
Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest

Viewing Contrib/8575
Full headers

From: simon@slevermann.de
Subject: Argon2 Password hashing contrib module
Compose comment
Download message
State:
0 replies:
3 followups: 1 2 3

Major security issue: yes  no

Notes:

Notification:


Date: Thu, 26 Jan 2017 13:36:57 +0000
From: simon@slevermann.de
To: openldap-its@OpenLDAP.org
Subject: Argon2 Password hashing contrib module
Full_Name: Simon Levermann
Version: 
OS: 
URL: ftp://ftp.openldap.org/incoming/simon-levermann-170126.patch
Submission from: (NULL) (2001:638:708:f002:deab:9ae4:7f07:d350)


This patch adds a password hashing module for the argon2 function to the
contrib/slapd-modules/passwd/ modules. Argon2 is a relatively new hash function
which has won the Password Hashing Competition (https://password-hashing.net)

The attached patch file is derived from OpenLDAP Software. All of the
modifications to OpenLDAP Software represented in the following patch(es) were
developed by Simon Levermann simon@slevermann.de. I have not assigned rights
and/or interest in this work to any party.

I, Simon Levermann, hereby place the following modifications to OpenLDAP
Software (and only these modifications) into the public domain. Hence, these
modifications may be freely used and/or redistributed for any purpose with or
without attribution and/or other notice.

Followup 1

Download message
Date: Fri, 03 Mar 2017 16:07:51 -0800
From: Quanah Gibson-Mount <quanah@symas.com>
To: simon@slevermann.de, openldap-its@OpenLDAP.org
Subject: Re: (ITS#8575) Argon2 Password hashing contrib module
--On Thursday, January 26, 2017 1:36 PM +0000 simon@slevermann.de wrote:

> This patch adds a password hashing module for the argon2 function to the
> contrib/slapd-modules/passwd/ modules. Argon2 is a relatively new hash
> function which has won the Password Hashing Competition
> (https://password-hashing.net)

Discussed with Simon in IRC, he is going to look at making the 
modifications necessary so that this module can also use libsodium.

--Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>




Followup 2

Download message
From: Raphael Geissert <atomo64@gmail.com>
Date: Thu, 31 Jan 2019 16:17:02 +0100
Subject: Re: (ITS#8575) Argon2 Password hashing contrib module
To: openldap-its@openldap.org
Cc: simon@slevermann.de
Hi,

Is there any progress on a libsodium-based module? Or is there any
chance that the current version be integrated as-is ("one is better
than none")?

Regards,
-- 
Raphael Geissert



Followup 3

Download message
Subject: Re: (ITS#8575) Argon2 Password hashing contrib module
To: Raphael Geissert <atomo64@gmail.com>, openldap-its@openldap.org
From: Simon Levermann <simon@slevermann.de>
Date: Thu, 31 Jan 2019 16:20:14 +0100
Hi,

I have essentially given up on doing this, because I no longer work for 
the employer that had me work on this, and at the time I did, I never 
got the thing done. The code itself worked when I tried it, but it has 
the caveat of not being configurable. I never quite found out how to 
properly implement configuration of a module that isn't an overlay, so I 
never got that done. Feel free to adjust the existing code, it should be 
adaptable to libsodium relatively easily.

Cheers,

Simon

Am 31.01.2019 um 16:17 schrieb Raphael Geissert:
> Hi,
>
> Is there any progress on a libsodium-based module? Or is there any
> chance that the current version be integrated as-is ("one is better
> than none")?
>
> Regards,


Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest


The OpenLDAP Issue Tracking System uses a hacked version of JitterBug

______________
© Copyright 2013, OpenLDAP Foundation, info@OpenLDAP.org