0

I am currently running argon2id of hashing function with below parameters on my IphoneXS:

Iterations: 8, Memory: 64MB, Parallelism: 8, HashLength: 32,

These params allow hashing time to be less than 1s.

So is there a formula to calculate the argon2id parameters?

I want to find the optimized parameters. Should I favor Iterations or Memory? The total hashing time will still be less than 1 that means iterations or memory will increase and based on that iteration or memory will decrease.

Improve this question
8
  • 1
    What effect do you want?
    – schroeder ♦
    Oct 9, 2022 at 14:44
  • 1
    Optimised for performance? What outcome do you want?
    – schroeder ♦
    Oct 9, 2022 at 15:03
  • 1
    "Better" to accomplish what, though?
    – schroeder ♦
    Oct 9, 2022 at 15:38
  • 1
    You've asked this a few times, and we keep asking the same things. You need to be able to answer what we are asking before we can figure out what "good" looks like in your context. It's like asking, "what's the best vehicle?" It depends. Best for what? Crossing the ocean? Going to space? Going to the store in an environmentally friendly way?
    – schroeder ♦
    Oct 9, 2022 at 15:40
  • 1
    I'm trying to help you. You are not helping us to help you. As the answer that you accepted stated, even he can't help you without more info. Just answer our questions.
    – schroeder ♦
    Oct 10, 2022 at 6:57

1 Answer 1

Reset to default
0

The OWASP Password Storage Cheat Sheet gives the following general recommendation (based on discussion of cracking rates from March 2021):

Argon2id should use one of the following configuration settings as a base minimum which includes the minimum memory size (m), the minimum number of iterations (t) and the degree of parallelism (p).

  • m=37 MiB, t=1, p=1
  • m=15 MiB, t=2, p=1

Both of these configuration settings are equivalent in the defense they provide. The only difference is a trade off between CPU and RAM usage.

So those are probably a good starting point. But without knowing your use case or objectives, no one can really say whether they're they're "better" or "more optimised" than the parameters you've posted, or than the defaults of whatever library you're using.

Improve this answer

Not the answer you're looking for? Browse other questions tagged .