argon2id 0.4.1-x64-mingw-ucrt → 0.5.0-x64-mingw-ucrt

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 19c17fab1829b3a9e65b55c1c119b02c7f345f2419ccd580212a1c03c9e57eca
-  data.tar.gz: d1f8c1fe699f8a0acf27e587596f258ac24c3e13ed6e06b2a481421be686cd40
+  metadata.gz: 046246d2626875dc6a452e42067e5a5bc46810d36dcd4cbb3b848ede3050475e
+  data.tar.gz: 77859d74535214733394e760c57a24e4f1ef5bb3c56ce08ed43d7d1018c0844f
 SHA512:
-  metadata.gz: 3853dd609eee51cc696ac90aa4fa5d95516307b83ef1771abff62934cadaeef8bf2f50ad3c7323a961380c22070686ab7c208bf0bacba0414f56e89e85fd4551
-  data.tar.gz: '01276878f91d9e0e3ae62e5d05e1f44008801c99835463f8a6e3c1c8505f9e08f09398f01e2e5ffbcb4807b88c4a42f6aac8b9d477d59bd9f427b2bb04769232'
+  metadata.gz: 33cdbc4f20b4abbf01c153c8ad23d5b319ec57244a9170dfbc15875a25de62f93dd2c37929fea7800e54fc338f82631ac89e779fb26af3a6acfee5514393e4cd
+  data.tar.gz: 1142a07f1833a94374c766cbf339528adffb021f36d9fce45bbc974e327c61aef867389bc81662ecbdae71fa3769b44fba3fa79d5e16864a2fb5bfd2a3fba3a6

data/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.0] - 2024-11-02
+
+### Removed
+
+- No longer expose the `type` of an encoded hash as it must always be an
+  Argon2id hash
+
 ## [0.4.1] - 2024-11-02
 
 ### Changed
@@ -86,6 +93,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   reference C implementation of Argon2, the password-hashing function that won
   the Password Hashing Competition.
 
+[0.5.0]: https://github.com/mudge/argon2id/releases/tag/v0.5.0
 [0.4.1]: https://github.com/mudge/argon2id/releases/tag/v0.4.1
 [0.4.0]: https://github.com/mudge/argon2id/releases/tag/v0.4.0
 [0.3.0]: https://github.com/mudge/argon2id/releases/tag/v0.3.0

data/README.md

@@ -5,7 +5,7 @@ Ruby bindings to [Argon2][], the password-hashing function that won the 2015
 
 [![Build Status](https://github.com/mudge/argon2id/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/mudge/argon2id/actions)
 
-**Current version:** 0.4.1  
+**Current version:** 0.5.0  
 **Bundled Argon2 version:** libargon2.1 (20190702)
 
 ```ruby
@@ -135,6 +135,10 @@ password == "opensesame"    #=> true
 password == "notopensesame" #=> false
 ```
 
+> [!WARNING]
+> `Argon2id::Password.new` does not support hashes generated from other Argon2
+> variants such as Argon2i and Argon2d.
+
 For compatibility with [bcrypt-ruby][], `Argon2id::Password#==` is aliased to `Argon2id::Password.is_password?`:
 
 ```ruby
@@ -147,7 +151,6 @@ The various parts of the encoded hash can be retrieved:
 
 ```ruby
 password = Argon2id::Password.new("$argon2id$v=19$m=256,t=2,p=1$c29tZXNhbHQ$nf65EOgLrQMR/uIPnA4rEsF5h7TKyQwu9U1bMCHGi/4")
-password.type        #=> "argon2id"
 password.version     #=> 19
 password.m_cost      #=> 256
 password.t_cost      #=> 2
@@ -198,11 +201,11 @@ notes](https://github.com/mudge/argon2id/releases) for each version and can be
 checked with `sha256sum`, e.g.
 
 ```console
-$ gem fetch argon2id -v 0.4.0
-Fetching argon2id-0.4.0-arm64-darwin.gem
-Downloaded argon2id-0.4.0-arm64-darwin
-$ sha256sum argon2id-0.4.0-arm64-darwin.gem
-2cecd6d5a1ecaf0a025e95714c0dee22dfc3d4585b649c57c06f432031b55a77  argon2id-0.4.0-arm64-darwin.gem
+$ gem fetch argon2id -v 0.4.1
+Fetching argon2id-0.4.1-arm64-darwin.gem
+Downloaded argon2id-0.4.1-arm64-darwin
+$ sha256sum argon2id-0.4.1-arm64-darwin.gem
+c74c06c2c4ce70d6c3822f05d83bab4ea431dd16ec086c9c856da3c6e0d9bbe9  argon2id-0.4.1-arm64-darwin.gem
 ```
 
 [GPG](https://www.gnupg.org/) signatures are attached to each release (the
@@ -212,8 +215,8 @@ from a public keyserver, e.g. `gpg --keyserver keyserver.ubuntu.com --recv-key
 0x39AC3530070E0F75`):
 
 ```console
-$ gpg --verify argon2id-0.4.0-arm64-darwin.gem.sig argon2id-0.4.0-arm64-darwin.gem
-gpg: Signature made Sat  2 Nov 15:25:15 2024 GMT
+$ gpg --verify argon2id-0.4.1-arm64-darwin.gem.sig argon2id-0.4.1-arm64-darwin.gem
+gpg: Signature made Sat  2 Nov 20:50:54 2024 GMT
 gpg:                using RSA key 702609D9C790F45B577D7BEC39AC3530070E0F75
 gpg: Good signature from "Paul Mucur <mudge@mudge.name>" [unknown]
 gpg:                 aka "Paul Mucur <paul@ghostcassette.com>" [unknown]

data/lib/argon2id/password.rb

@@ -25,7 +25,6 @@ module Argon2id
   #
   # You can read various parameters out of a password hash:
   #
-  #   password.type        #=> "argon2id"
   #   password.version     #=> 19
   #   password.m_cost      #=> 19456
   #   password.t_cost      #=> 2
@@ -36,7 +35,7 @@ module Argon2id
     PATTERN = %r{
       \A
       \$
-      (argon2(?:id|i|d))
+      argon2id
       (?:\$v=(\d+))?
       \$m=(\d+)
       ,t=(\d+)
@@ -51,9 +50,6 @@ module Argon2id
     # The encoded password hash.
     attr_reader :encoded
 
-    # The type of the hashing function.
-    attr_reader :type
-
     # The version number of the hashing function.
     attr_reader :version
 
@@ -113,13 +109,12 @@ module Argon2id
       raise ArgumentError, "invalid hash" unless PATTERN =~ String(encoded)
 
       @encoded = $&
-      @type = $1
-      @version = Integer($2 || 0x10)
-      @m_cost = Integer($3)
-      @t_cost = Integer($4)
-      @parallelism = Integer($5)
-      @salt = $6.unpack1("m")
-      @output = $7.unpack1("m")
+      @version = Integer($1 || 0x10)
+      @m_cost = Integer($2)
+      @t_cost = Integer($3)
+      @parallelism = Integer($4)
+      @salt = $5.unpack1("m")
+      @output = $6.unpack1("m")
     end
 
     # Return the encoded password hash.

data/lib/argon2id/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Argon2id
-  VERSION = "0.4.1"
+  VERSION = "0.5.0"
 end

data/test/test_password.rb

@@ -98,6 +98,12 @@ class TestPassword < Minitest::Test
     end
   end
 
+  def test_raises_for_non_argon2id_hashes
+    assert_raises(ArgumentError) do
+      Argon2id::Password.new("$argon2i$v=19$m=256,t=2,p=1$c29tZXNhbHQ$iekCn0Y3spW+sCcFanM2xBT63UP2sghkUoHLIUpWRS8")
+    end
+  end
+
   def test_salt_supports_versionless_hashes
     password = Argon2id::Password.new("$argon2id$m=256,t=2,p=1$c29tZXNhbHQ$nf65EOgLrQMR/uIPnA4rEsF5h7TKyQwu9U1bMCHGi/4")
 
@@ -110,18 +116,6 @@ class TestPassword < Minitest::Test
     assert Argon2id::Password.new(password) == "password"
   end
 
-  def test_extracting_type_from_hash
-    password = Argon2id::Password.new("$argon2id$v=19$m=256,t=2,p=1$c29tZXNhbHQ$nf65EOgLrQMR/uIPnA4rEsF5h7TKyQwu9U1bMCHGi/4")
-
-    assert_equal "argon2id", password.type
-  end
-
-  def test_extracting_type_from_argoni_hash
-    password = Argon2id::Password.new("$argon2i$v=19$m=256,t=2,p=1$c29tZXNhbHQ$nf65EOgLrQMR/uIPnA4rEsF5h7TKyQwu9U1bMCHGi/4")
-
-    assert_equal "argon2i", password.type
-  end
-
   def test_extracting_version_from_hash
     password = Argon2id::Password.new("$argon2id$v=19$m=256,t=2,p=1$c29tZXNhbHQ$nf65EOgLrQMR/uIPnA4rEsF5h7TKyQwu9U1bMCHGi/4")
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: argon2id
 version: !ruby/object:Gem::Version
-  version: 0.4.1
+  version: 0.5.0
 platform: x64-mingw-ucrt
 authors:
 - Paul Mucur