--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3ad252c475
2018-01-02 14:43:56.509395
--------------------------------------------------------------------------------
Name : argon2
Product : Fedora EPEL 7
Version : 20161029
Release : 2.el7
URL :
https://github.com/P-H-C/phc-winner-argon2
Summary : The password-hashing tools
Description :
Argon2 is a password-hashing function that summarizes the state of the art
in the design of memory-hard functions and can be used to hash passwords
for credential storage, key derivation, or other applications.
It has a simple design aimed at the highest memory filling rate and
effective use of multiple computing units, while still providing defense
against tradeoff attacks (by exploiting the cache and memory organization
of the recent processors).
Argon2 has three variants: Argon2i, Argon2d, and Argon2id.
* Argon2d is faster and uses data-depending memory access, which makes it
highly resistant against GPU cracking attacks and suitable for applications
with no threats from side-channel timing attacks (eg. cryptocurrencies).
* Argon2i instead uses data-independent memory access, which is preferred for
password hashing and password-based key derivation, but it is slower as it
makes more passes over the memory to protect from tradeoff attacks.
* Argon2id is a hybrid of Argon2i and Argon2d, using a combination of
data-depending and data-independent memory accesses, which gives some of
Argon2i's resistance to side-channel cache timing attacks and much of
Argon2d's resistance to GPU cracking attacks.
--------------------------------------------------------------------------------
Update Information:
Argon2 is a password-hashing function that summarizes the state of the art in
the design of memory-hard functions and can be used to hash passwords for
credential storage, key derivation, or other applications. It has a simple
design aimed at the highest memory filling rate and effective use of multiple
computing units, while still providing defense against tradeoff attacks (by
exploiting the cache and memory organization of the recent processors). Argon2
has three variants: Argon2i, Argon2d, and Argon2id. * Argon2d is faster and
uses data-depending memory access, which makes it highly resistant against GPU
cracking attacks and suitable for applications with no threats from side-
channel timing attacks (eg. cryptocurrencies). * Argon2i instead uses data-
independent memory access, which is preferred for password hashing and
password-based key derivation, but it is slower as it makes more passes over
the memory to protect from tradeoff attacks. * Argon2id is a hybrid of Argon2i
and Argon2d, using a combination of data-depending and data-independent memory
accesses, which gives some of Argon2i's resistance to side-channel cache timing
attacks and much of Argon2d's resistance to GPU cracking attacks.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523340 - argon2 for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1523340
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update argon2' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------