diff --git a/src/ksf.rs b/src/ksf.rs index 9aacc9e..4af2415 100644 --- a/src/ksf.rs +++ b/src/ksf.rs @@ -11,6 +11,10 @@ use generic_array::{ArrayLength, GenericArray}; use crate::errors::InternalError; +/// Recommended salt length for argon2-based password hashing. +#[cfg(feature = "argon2")] +const ARGON2_RECOMMENDED_SALT_LEN: usize = 16; + /// Used for the key stretching function in OPAQUE pub trait Ksf: Default { /// Computes the key stretching function @@ -40,7 +44,7 @@ impl Ksf for argon2::Argon2<'_> { input: GenericArray, ) -> Result, InternalError> { let mut output = GenericArray::default(); - self.hash_password_into(&input, &[0; argon2::MIN_SALT_LEN], &mut output) + self.hash_password_into(&input, &[0; ARGON2_RECOMMENDED_SALT_LEN], &mut output) .map_err(|_| InternalError::KsfError)?; Ok(output) }