Skip to content

Upgrading argon2-cffi 16 to 18

Review needed16.3.0 → 18.3.0New4Changed4

Review neededUpgrade verdict

4 behavior changes.

  • New passwords are now hashed with the Argon2id variant instead of the previous type, following updated security recommendations.
  • The default hashing settings are now stronger, aiming for a verification time of about 50 milliseconds.
  • Password verification still works with hashes created under the old settings because the type is detected automatically.
  • The bundled Argon2 library is updated to a specific upstream snapshot.
Nothing to change

No breaking, platform, security or deprecated items in this range.

Adds cffi >=1.0.0, six.

Installs 3 packages in all (was 0).

Also installs pycparser.

Nothing in this upgrade needs a code or configuration change.