Comments on: Using Argon2 in Lucee CFML https://www.andrewdixon.co.uk/2020/09/19/using-argon2-in-lucee-cfml/ CFML, AWS, WordPress and more... Mon, 26 Jun 2023 19:39:36 +0000 hourly 1 By: Andrew Dixon https://www.andrewdixon.co.uk/2020/09/19/using-argon2-in-lucee-cfml/#comment-1082 Thu, 25 Aug 2022 11:24:31 +0000 https://www.andrewdixon.co.uk/?p=289#comment-1082 In reply to Scott Conklin.

Hi Scott,

Yes, that is correct, you store the result for GenerateArgon2Hash and then use the Argon2CheckHash function to check if the store hash matches the input. So the only thing you can’t do from my other article is add “pepper” as the “salt” is randomly generated by the function, but that is acceptable in my opinion.

]]> By: Scott Conklin https://www.andrewdixon.co.uk/2020/09/19/using-argon2-in-lucee-cfml/#comment-1081 Wed, 24 Aug 2022 23:41:47 +0000 https://www.andrewdixon.co.uk/?p=289#comment-1081 Andrew –
Thanks for the great articles and review of this. Do I understand correctly that unlike your “Password Hashing in CFML” post where you showed how to save the iterations, salt etc as a string in the DB and then parse them when checking the password, I now can skip all of this with GenerateArgon2Hash?
It is now pretty much just using Argon2CheckHash to compare the password with the stored string generated from GenerateArgon2Hash for either true or false? is that right?

]]>