Skip to content

fix: update Argon2id parameters to OWASP minimum#85

Merged
Raulgooo merged 1 commit into
shark-auth:mainfrom
Jah-yee:fix/argon2-owasp-minimum
May 4, 2026
Merged

fix: update Argon2id parameters to OWASP minimum#85
Raulgooo merged 1 commit into
shark-auth:mainfrom
Jah-yee:fix/argon2-owasp-minimum

Conversation

@Jah-yee

@Jah-yee Jah-yee commented May 4, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Updated Argon2id production defaults to meet OWASP minimum requirements.
  • Memory: 16384 KB (16 MB) → 19456 KB (19 MB)
  • Iterations: 1 → 2

Changes

Modified default values in internal/config/config.go (line 356-357) to comply with OWASP Argon2id minimum parameters.

Fixes #82

Memory: 16384 (16MB) -> 19456 (19MB)
Iterations: 1 -> 2

These parameters were set to 16MB/1 iteration for benchmark debugging.
Updated to meet OWASP minimum Argon2id requirements.

Fixes #82
@Raulgooo Raulgooo merged commit 60c4f16 into shark-auth:main May 4, 2026
5 checks passed
@Raulgooo

Raulgooo commented May 4, 2026

Copy link
Copy Markdown
Contributor

Looks Good to me, thanks for the work Jah-yee! Consider starring the repo if you see the vision :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security and performance: Change Argon Parameters to OWASP minimum.

2 participants