hexa_hash = crypto.argon2(password, salt)
hexa_hash = crypto.argon2(password, salt, name, value, ...)
| Parameter | Description |
|---|---|
| password | a uint8 vector (raw bytes) or a character vector (UTF-8 bytes): secret to hash. |
| salt | a uint8 vector (raw bytes) or a character vector (UTF-8 bytes): at least 8 bytes, 16 random bytes recommended, unique per password. |
| 'Variant' | 'argon2id' (default, recommended), 'argon2i' or 'argon2d'. |
| 'Memory' | memory cost in KiB, at least 8 times the number of lanes (default: 65536, that is 64 MiB). |
| 'Passes' | number of iterations, at least 1 (default: 3). |
| 'Lanes' | degree of parallelism of the algorithm, at least 1 (default: 1); the computation itself is single threaded. |
| 'Length' | output length in bytes, between 4 and 1024 (default: 32). |
| 'Key' | optional secret key (pepper) as uint8 or text, mixed into the hash. |
| 'AssociatedData' | optional associated data as uint8 or text, mixed into the hash. |
| Parameter | Description |
|---|---|
| hexa_hash | a character vector: 2 * Length lowercase hexadecimal characters. |
crypto.argon2 computes an Argon2 hash (RFC 9106), the memory-hard function recommended for password storage and for deriving encryption keys from passphrases. Store the salt and the parameters next to the hash: verifying a password means recomputing the hash with the same inputs and comparing.
The defaults (argon2id, 64 MiB, 3 passes, 1 lane) take a fraction of a second on a desktop machine; raise Memory or Passes for stronger protection, lower them only for tests. The work area is allocated for each call and wiped afterwards.
R = crypto.argon2('correct horse battery staple', 'salt-of-16-bytes', 'Memory', 1024, 'Passes', 2)password = uint8(repmat(1, 1, 32));
salt = uint8(repmat(2, 1, 16));
R = crypto.argon2(password, salt, 'Memory', 32, 'Passes', 3, 'Lanes', 4, 'Key', uint8(repmat(3, 1, 8)), 'AssociatedData', uint8(repmat(4, 1, 12)))| Version | Description |
|---|---|
| 2.0.0 | initial version |