{"componentChunkName":"component---gatsby-theme-teklog-src-templates-post-tsx","path":"/php-7-2-and-argon2-password-hashing","result":{"data":{"site":{"siteMetadata":{"siteUrl":"https://blog.tekmi.nl","author":{"name":"Teklog","avatar":"/img/tekmi-icon.svg"}}},"blogPost":{"frontmatter":{"title":"PHP 7.2 and Argon2 Password Hashing","slug":"php-7-2-and-argon2-password-hashing","series":null,"date":"2018-07-19","datePretty":"19 July, 2018","coverImage":{"childImageSharp":{"fixed":{"base64":"data:image/jpeg;base64,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","width":1000,"height":750,"src":"/static/07f6341383c50dc48b3a5a77029526b0/a7715/woodenRing.jpg","srcSet":"/static/07f6341383c50dc48b3a5a77029526b0/a7715/woodenRing.jpg 1x"}}},"author":null,"authorAvatar":null},"timeToRead":8,"excerpt":"Introduction PHP 7.2 version appeared for the first time on 30th of November 2017, Time goes fast and more than a half year later, on 21st of June…","html":"

Introduction

\n

PHP 7.2 version appeared for the first time on 30th of November 2017, Time goes fast and more than a half year later, on 21st of June 2018, PHP announced 7.2.7 patch release. Among all the new features introduced in PHP 7.2, there is one, namely Argon2 Password Hashing, which will be the topic of our today's post. Let's explore this great addition together and verify whether Argon2 is a good contender to Bcrypt or not.

\n

As always, all the other features of PHP 7.2 can be found under Request For Changes wiki page.

\n

Assumptions

\n\n

Try it yourself

\n

Clone blogging-phplatest repository

\n
git clone https://github.com/tekmi/blogging-phplatest\ncd blogging-phplatest
\n

Run docker container, based on the php 7.2.7-cli-stretch image.

\n
docker run -it --rm \\\n-v \"$PWD\":/usr/src/php-7.2 \\\n-w /usr/src/php-7.2 \\\nphp:7.2.7-cli-stretch \\\nphp php-7.2/argon2_password_hash/index.php
\n

Explanation

\n

Argon2 comes in two flavors, Argon2d and Argon2i. The former one is recommended primarily for cryptocurrencies and backend servers, while the latter for password hashing and password-based derivation. Due to this difference, RFC implementing Argon2 in PHP doesn't provide Argon2d flavor - therefore no unnecessary PASSWORD_ARGON2 constant.

\n

You can verify it by exploring Argon2 related named constants that come with PHP 7.2 version.

\n\n

If somehow you cannot use those variables, make sure you had compiled your PHP --with-password-argon2 , since this ensures libargon2 have been included. Docker image being used here has it compiled - feel free to double check it by running:

\n
docker run -it --rm \\\n-v \"$PWD\":/usr/src/php-7.2 \\\n-w /usr/src/php-7.2 \\\nphp:7.2.7-cli-stretch \\\n-r \"phpinfo();\" | grep argon2
\n

What interested me was why Argon2i Algorithm gained so much traction and if Bcrypt is still the valid option.

\n

Reading OWASP cheatsheets about password hashing, looks like there are three other viable contenders, namely PBKDF2, scrypt and bcrypt. While OWASP prefers Argon2, looks like Paragonie is fine with default Bcrypt. Any of the aforementioned algorithms are good and still considered secure, but when it comes to my preference:

\n\n

Having said all of this, let's see how to use Argon2 new algorithm to our advantage by exploring the password_hash function.

\n

In the basic form, Argon2 password hashing works with following defaults (memory cost: 1024, time cost: 2, threads: 2) and can be invoked as shown below.

\n
$hashed = password_hash(\"tekmi\", PASSWORD_ARGON2I);
\n

If you don't like the defaults, Argon2 accepts additional options, that can be passed as third parameter to password_hash function. Scan PHP Predefined Password Hashing Constant page in order to learn more. In the example below you can see all of them adjusted at once.

\n
$hashed = password_hash(\"tekmi\", PASSWORD_ARGON2I, [\n 'memory_cost' => 2 ** 12,\n 'time_cost' => 10,\n 'threads' => 20\n]);
\n

Be warned that tweaking up those values too much, can drastically increase the execution time of your script.

\n
\n

To give you an example, with params (memory cost: 1048576, time cost: 1000, threads: 50), this call took 440 seconds before it was finished! Moreover Memory usage was 1.014Gib, CPU was at 391.38% and the number of PIDS oscillated around 50.

\n
\n

If you specify too crazy values, you can additionally come across one of the following errors.

\n
- Warning: password_hash(): Memory cost is outside of allowed memory range in /usr/src/php-7.2/php-7.2/argon2_password_hash/index.php on line 20\n- Warning: password_hash(): Time cost is outside of allowed time range in /usr/src/php-7.2/php-7.2/argon2_password_hash/index.php on line 20\n- Warning: password_hash(): Invalid number of threads in /usr/src/php-7.2/php-7.2/argon2_password_hash/index.php on line 20\n- Warning: password_hash(): Memory cost is too small in /usr/src/php-7.2/php-7.2/argon2_password_hash/index.php on line 20
\n

You may tinker with this by uncommenting a few lines in index.php script and re-run container with memory limited to 1 GiB, as shown below.

\n
docker run -it --rm \\\n-v \"$PWD\":/usr/src/php-7.2 \\\n-w /usr/src/php-7.2 \\\n--memory='1g' --cpus='.5' \\\nphp:7.2.7-cli-stretch \\\nphp php-7.2/argon2_password_hash/index.php
\n

I couldn't find much information about those limits, so by trial and error, I figured out some of them, e.g: threads limit 30000000, time limit 900000000000, and surprisingly memory limit 4294967296, even if my container was limited to only 1 GiB memory.

\n

By now we successfully hashed our password 'tekmi', which shall resemble something like $argon2i$v=19$m=1024,t=2,p=2$YU9GN280WU1icm0zVC9sRg$oCiQ7N4liAGYrkFxW9gTDY/gBKXIHizVEKcZcz72tqw or $argon2i$v=19$m=1024,t=2,p=2$VTBsd0dLeVQydm9PdWlmQQ$t8AFo0XU1zGR0hLgzJFxUQkZ3YQL49pqwbAcdhRYn84. As you see, the same password with the same Argon2 defaults, will always result in different string.

\n

Additionally, if you study PHP Password Hashing functions page, you can see three other functions. Let's start with password_get_info, which will give you details of the hashed password, as shown below.

\n
$hashed = password_hash(\"tekmi\", PASSWORD_ARGON2I);\n$info = password_get_info($hashed);\nvar_dump($info);\n\n// result\narray(3) {\n  [\"algo\"]=>\n  int(2)\n  [\"algoName\"]=>\n  string(7) \"argon2i\"\n  [\"options\"]=>\n  array(3) {\n    [\"memory_cost\"]=>\n    int(1024)\n    [\"time_cost\"]=>\n    int(2)\n    [\"threads\"]=>\n    int(2)\n  }\n}
\n

If you call it with hash that doesn't make sense, you get unknown algorithm name and algorithm value is integer 0, as shown below.

\n
$info = password_get_info('SomeRandomString'); \nvar_dump($info);\n\n// result\narray(3) {\n [\"algo\"]=>\n int(0)\n [\"algoName\"]=>\n string(7) \"unknown\"\n [\"options\"]=>\n array(0) {\n }\n}
\n

After this part is clear, let's explore password_needs_rehash function, which can detect if given hash shall be rehashed. This can happen if you hashed your password with default Argon2 options, saved this hash in your database and later on decided to adjust your code to introduce different Argon2 options (e.g:  time_cost, memory_cost or threads). Below snippet presents such situation.

\n
$hashed = password_hash(\"tekmi\", PASSWORD_ARGON2I); \n$needsRehashing1 = password_needs_rehash($hashed, PASSWORD_ARGON2I);\n$needsRehashing2 = password_needs_rehash($hashed, PASSWORD_ARGON2I, ['time_cost' => 3]);\nvar_dump([$needsRehashing1, $needsRehashing2]);\n\n// result\narray(2) {\n [0] => bool(false)\n [1] => bool(true)\n}
\n

And finally onto the last function, password_verify, which can verify if given hash matches given password. Let's see it in action in the snippet below.

\n
$hashed = password_hash(\"tekmi\", PASSWORD_ARGON2I);\n$verified1 = password_verify('tekmi', $hashed);\n$verified2 = password_verify('otherPassword', $hashed);\nvar_dump([$verified1, $verified2]);\n\n// result\narray(2) {\n [0] => bool(true)\n [1] => bool(false)\n}
\n

How did we do it until now

\n

PHP from version 5.5.0 decided to integrate Bcrypt algorithm, making it the default password hashing algorithm. So this was and still is the viable and secure option, if one doesn't like or cannot take advantage of Argon2.

\n

Summary

\n

It's great to see PHP evolving and incorporating new things into the codebase. It ensures me that the language is vivid and manages to keep up with the latest trends - therefore I wanted to thank all the PHP contributors for their heavy and dedicated work.

\n

If you are about to start a new project or you are still hashing passwords with MD5 or SHA, consider trying out the new brand Argon2 algorithms. If you have old project though, which works perfectly with Bcrypt, don't rush and update all your codebase - the situation you are in is totally fine and shall be fine for years to come - in the end Bcrypt has been battle tested and has established high security standards.

\n

In the upcoming post, I would explore another great addition to PHP 7.2, namely Libsodium, so see you there.

"}},"pageContext":{"postId":"7e53e071-c5cb-5951-a8ef-03f7a073aef7","slug":"php-7-2-and-argon2-password-hashing"}}}