Re: [openpgp] The Argon2 proposal seems incomplete (Draft 6)

[Daniel Huigens <[e-mail]>]

On Tuesday, August 2nd, 2022 at 12:16, Bruce Walzer wrote:

> I don't see this as a parameter problem. When Argon2 is used in
> a normal way the parameters (CPU, threads, memory) are deliberately
> set to, as much as is possible, prevent the hash from being done on
> any other system.

This is not true at all. The first recommended parameter set is
explicitly given as a "uniformly safe option that is not tailored to
your application or hardware".

Then, the further steps are only there in case you want an option
that *is* tailored to your hardware, however, even then you can still
build in some safety margin, for example by setting the maximum
affordable time to some percentage of the time you can actually afford,
in case you have to do the computation on a slower device, etc.

> This is true even to the extent that it is designed
> to run badly on any other platform than x86.

Citation needed? Being optimized for the x86 architecture is not the
same as being "designed to run badly on any other platform than x86".

Best,
Daniel