Argon2 about sqleet

[resilar]

Balloon hashing appears to be a competitive alternative (and superficially it seems simpler with less bells & whistles).

There has been a fair bit of turmoil with regards to these new key derivation functions and safe ranges of parameters for them. Therefore I'm not too eager to switch to something which may turn out to be an inadequate long-term solution. So let's just stick with the current PBKDF2-HMAC-SHA256 (16-byte salt, 12345 iterations) for the time being until something stable pops up. Or at least until someone convinces me that Argon2 is no longer "experimental" and can prove this by giving a set of practical Argon2 parameters which are considered secure for the next decade or two.

[resilar]

My hatred of Argon2 has reached high enough levels to confidently close this issue as WONTFIX. Modern space-hard key derivation function is still needed, but it will not be Argon2.