On Tue, 2021-02-02 at 17:05 -0500, Sam Hartman wrote: > > > > > > I don't know whether that's long-term plan or not. > yescrypt and argon2 seem to have similar security properties. > I'd need to dig more into the PHC report to figure out whether > there's > enough of an advantage to do another switch. > I mean yeah, if argon2 was an option today I probably would have > picked
Wouldn't it then be a better choice to wait for the availability of argon2? Not that'd I'd have any insight on whether yescrypt is much worse, but Argon2 is simply the winner and will probably receive the most scrutiny over the years. So it would seem like the wisest long term choice - just like most people use Rijndael/AES and not so much the other AES finalists. Cheers, Chris.
