Re: [Cfrg] I-D Action: draft-irtf-cfrg-argon2-10.txt

[Stephen Farrell <[e-mail]>]

Hiya,

I did an IRSG review for -09. This addresses all the issues
that I found there, except one, and that being (I think)
the most important one;-)

The issue: What is a "primary variant" and what is an
implementer supposed to do?

The above is a quote from my review of -09. Apologies if I
missed some change in -10 that addresses this.

Let me make a suggestion: state that argon2id is mandatory
to implement, and that the other variants are not. That
is language that implementers of RFCs are used to reading
and understand. An even better way to say that is to say
that "argon2id MUST be supported" and that the other
variants "MAY be supported." With the current language we
could see different implementers interpret the text in
different ways, possibly damaging interop.

Cheers,
S.

On 25/03/2020 15:08, [e-mail] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Crypto Forum RG of the IRTF.
> 
>         Title           : The memory-hard Argon2 password hash and proof-of-work function
>         Authors         : Alex Biryukov
>                           Daniel Dinu
>                           Dmitry Khovratovich
>                           Simon Josefsson
> 	Filename        : draft-irtf-cfrg-argon2-10.txt
> 	Pages           : 20
> 	Date            : 2020-03-25
> 
> Abstract:
>    This document describes the Argon2 memory-hard function for password
>    hashing and proof-of-work applications.  We provide an implementer-
>    oriented description with test vectors.  The purpose is to simplify
>    adoption of Argon2 for Internet protocols.  This document is a
>    product of the Crypto Forum Research Group (CFRG) in the IRTF.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-irtf-cfrg-argon2-10
> https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-argon2-10
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-irtf-cfrg-argon2-10
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> Cfrg mailing list
> [e-mail]
> https://www.irtf.org/mailman/listinfo/cfrg
>