IBM Security Verify

 View Only
Expand all | Collapse all

Argon2 password hashing in ISDS server support

  • 1.  Argon2 password hashing in ISDS server support

    Posted Mon March 18, 2019 09:33 AM
    Hello,

    We are wondering if there is any possibility to store UserPasswords in IBM Security Directory Server with the Argon2 password hashing algoritm? Is there any work arround for this or is this planned for support any time soon?

    Thank you
    Sander Meyfroot

    ------------------------------
    Sander Meyfroot
    ------------------------------


  • 2.  RE: Argon2 password hashing in ISDS server support

    Posted Mon March 18, 2019 04:06 PM

    Hi,

    SDS do not support Argon2 password hashing at this time. If you need this to be supported please submit an RFE: 

    https://www.ibm.com/developerworks/rfe/execute?use_case=submitRfe

    On the other hand SDS 6.4.0.16(or later) do support alternative PBKDF2, which is also a key derivative function based hashing method (similar to Argon2).
    https://www.ibm.com/support/knowledgecenter/en/SSVJJU_6.4.0/com.ibm.IBMDS.doc_6.4/ds_ag_dir_configuring_pbkdf2.html

    For latest fix levels of SDS 6.4 - refer: 

    http://www-01.ibm.com/support/docview.wss?uid=swg27009778#ver64


    I hope this helps.

    Thanks,

    - Ram.



    ------------------------------
    Ramamohan Reddy
    ------------------------------