Re: [Cfrg] adopting Argon2 as a CFRG document

We might want to hold off on Argon2 — at least on finalizing it — until the team has
responded to (and hopefully mitigated) the issues mentioned at
https://eprint.iacr.org/2016/027 <https://eprint.iacr.org/2016/027>.  Essentially the problem is that Argon2 can be computed
in less space than advertised.  The team said that they are planning a response, cf
http://permalink.gmane.org/gmane.comp.security.phc/3606 <http://permalink.gmane.org/gmane.comp.security.phc/3606>

Cheers,
— Mike

> On Jan 22, 2016, at 11:10 AM, Paterson, Kenny <Kenny.Paterson@rhul.ac.uk> wrote:
> 
> Dear CFRG,
> 
> Having received limited feedback either way from the group (specifically,
> one voice in favour), the CFRG chairs have decided to adopt
> https://tools.ietf.org/html/draft-josefsson-argon2-00 as a CFRG document.
> 
> If you have objections or concerns, please reply to this email or directly
> to CFRG chairs.
> 
> Sincerely,
> 
> Kenny Paterson (for the chairs)
> 
> 
> On 06/11/2015 11:47, "Paterson, Kenny" <Kenny.Paterson@rhul.ac.uk> wrote:
> 
>> Hi Stephen,
>> 
>> Yes, the chairs are amenable to this. We've been keeping an eye on the
>> password hashing competition and were planning a work item in this area.
>> 
>> Any comments from the group, either supporting or objecting to us adopting
>> this draft in the RG?
>> 
>> Cheers,
>> 
>> Kenny 
>> 
>> (for the chairs)
>> 
>> On 06/11/2015 02:18, "Cfrg on behalf of Stephen Farrell"
>> <cfrg-bounces@irtf.org on behalf of stephen.farrell@cs.tcd.ie> wrote:
>> 
>>> 
>>> The password hashing competition has a winner and some folks
>>> in the openpgp wg are interested in using that winner. I guess
>>> this might be better processed via cfrg if folks are amenable
>>> to that.
>>> 
>>> Thanks,
>>> S.
> 
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg