BSidesLV 2016

Argon2 is the winner of the Password Hashing Competition (PHC), as announced in July 2015. Since then the reference code of Argon2 on GitHub received more than 1000 stars and has bindings for most popular languages and platforms. People implemented Argon2, cryptanalyzed it, deployed it. Argon2 supersedes legacy password hashes PBKDF2, bcrypt, scrypt, and will likely become the standard algorithm for memory-hard hashing and key derivation. In this talk I'll review what's been accomplished in a year, and I'll explain when you should use Argon2 and how you can best fine-tune it for your application.