{"action":"created","comment":{"url":"https://api.github.com/repos/django/django/pulls/comments/51591833","id":51591833,"diff_hunk":"@@ -55,6 +55,31 @@ Minor features\n :mod:`django.contrib.auth`\n ^^^^^^^^^^^^^^^^^^^^^^^^^^\n \n+* Support for the Argon2_ password hash has been added.  Argon2 is the winner\n+  of the recent `Password Hashing Competition`_, which has been organized\n+  by the community in similar style as the NIST competitions that selected\n+  the hash SHA-3 and cipher AES.\n+\n+  To use Argon2_ put ``django.contrib.auth.hashers.Argon2Hasher`` at the start\n+  of :setting:`PASSWORD_HASHERS`.  That is, in your settings file, you'd put::\n+\n+      PASSWORD_HASHERS = [\n+          'django.contrib.auth.hashers.Argon2PasswordHasher',\n+          'django.contrib.auth.hashers.PBKDF2PasswordHasher',\n+          'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',\n+          'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',\n+          'django.contrib.auth.hashers.BCryptPasswordHasher',\n+          'django.contrib.auth.hashers.SHA1PasswordHasher',\n+          'django.contrib.auth.hashers.MD5PasswordHasher',\n+          'django.contrib.auth.hashers.UnsaltedSHA1PasswordHasher',\n+          'django.contrib.auth.hashers.UnsaltedMD5PasswordHasher',\n+          'django.contrib.auth.hashers.CryptPasswordHasher',\n+      ]\n+\n+  You need to keep the other entries in this list, or else Django won't","path":"docs/releases/1.10.txt","position":25,"original_position":25,"commit_id":"008e0d93ce862f8202e80f70bf9e492c52a523a7","original_commit_id":"008e0d93ce862f8202e80f70bf9e492c52a523a7","user":{"login":"timgraham","id":411869,"avatar_url":"https://avatars.githubusercontent.com/u/411869?v=3","gravatar_id":"","url":"https://api.github.com/users/timgraham","html_url":"https://github.com/timgraham","followers_url":"https://api.github.com/users/timgraham/followers","following_url":"https://api.github.com/users/timgraham/following{/other_user}","gists_url":"https://api.github.com/users/timgraham/gists{/gist_id}","starred_url":"https://api.github.com/users/timgraham/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timgraham/subscriptions","organizations_url":"https://api.github.com/users/timgraham/orgs","repos_url":"https://api.github.com/users/timgraham/repos","events_url":"https://api.github.com/users/timgraham/events{/privacy}","received_events_url":"https://api.github.com/users/timgraham/received_events","type":"User","site_admin":false},"body":"I would link to \"argon2_usage\" instead of repeating the example usage parts of it in the release notes.","created_at":"2016-02-02T16:24:02Z","updated_at":"2016-02-02T16:24:02Z","html_url":"https://github.com/django/django/pull/5876#discussion_r51591833","pull_request_url":"https://api.github.com/repos/django/django/pulls/5876","_links":{"self":{"href":"https://api.github.com/repos/django/django/pulls/comments/51591833"},"html":{"href":"https://github.com/django/django/pull/5876#discussion_r51591833"},"pull_request":{"href":"https://api.github.com/repos/django/django/pulls/5876"}}},"pull_request":{"url":"https://api.github.com/repos/django/django/pulls/5876","id":54601494,"html_url":"https://github.com/django/django/pull/5876","diff_url":"https://github.com/django/django/pull/5876.diff","patch_url":"https://github.com/django/django/pull/5876.patch","issue_url":"https://api.github.com/repos/django/django/issues/5876","number":5876,"state":"open","locked":false,"title":"Fixed #26033 -- Added argon2 password hasher.","user":{"login":"bwesterb","id":9975,"avatar_url":"https://avatars.githubusercontent.com/u/9975?v=3","gravatar_id":"","url":"https://api.github.com/users/bwesterb","html_url":"https://github.com/bwesterb","followers_url":"https://api.github.com/users/bwesterb/followers","following_url":"https://api.github.com/users/bwesterb/following{/other_user}","gists_url":"https://api.github.com/users/bwesterb/gists{/gist_id}","starred_url":"https://api.github.com/users/bwesterb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bwesterb/subscriptions","organizations_url":"https://api.github.com/users/bwesterb/orgs","repos_url":"https://api.github.com/users/bwesterb/repos","events_url":"https://api.github.com/users/bwesterb/events{/privacy}","received_events_url":"https://api.github.com/users/bwesterb/received_events","type":"User","site_admin":false},"body":"argon2 is the winner of the [Password Hashing Competition](https://password-hashing.net).\r\n\r\n1. There are two python bindings available for argon2:  `argon2` and `argon2-cffi`.  The first uses `ctypes` and the latter `cffi`.  As `cffi` works for most environments, I choose that one.\r\n2. `argon2` has four parameters: `time_cost`, `memory_cost`, `parallelism` and `type`.  I choose to copy the defaults of `argon2-cffi`.  [Section 9 of the argon2 specification discusses recommended  parameters.](https://password-hashing.net/argon2-specs.pdf)\r\n\r\nhttps://code.djangoproject.com/ticket/26033#ticket","created_at":"2015-12-26T12:22:43Z","updated_at":"2016-02-02T16:24:02Z","closed_at":null,"merged_at":null,"merge_commit_sha":"af669caaeca590d06378966697032e626f6598a4","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/django/django/pulls/5876/commits","review_comments_url":"https://api.github.com/repos/django/django/pulls/5876/comments","review_comment_url":"https://api.github.com/repos/django/django/pulls/comments{/number}","comments_url":"https://api.github.com/repos/django/django/issues/5876/comments","statuses_url":"https://api.github.com/repos/django/django/statuses/008e0d93ce862f8202e80f70bf9e492c52a523a7","head":{"label":"bwesterb:argon2","ref":"argon2","sha":"008e0d93ce862f8202e80f70bf9e492c52a523a7","user":{"login":"bwesterb","id":9975,"avatar_url":"https://avatars.githubusercontent.com/u/9975?v=3","gravatar_id":"","url":"https://api.github.com/users/bwesterb","html_url":"https://github.com/bwesterb","followers_url":"https://api.github.com/users/bwesterb/followers","following_url":"https://api.github.com/users/bwesterb/following{/other_user}","gists_url":"https://api.github.com/users/bwesterb/gists{/gist_id}","starred_url":"https://api.github.com/users/bwesterb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bwesterb/subscriptions","organizations_url":"https://api.github.com/users/bwesterb/orgs","repos_url":"https://api.github.com/users/bwesterb/repos","events_url":"https://api.github.com/users/bwesterb/events{/privacy}","received_events_url":"https://api.github.com/users/bwesterb/received_events","type":"User","site_admin":false},"repo":{"id":48609331,"name":"django","full_name":"bwesterb/django","owner":{"login":"bwesterb","id":9975,"avatar_url":"https://avatars.githubusercontent.com/u/9975?v=3","gravatar_id":"","url":"https://api.github.com/users/bwesterb","html_url":"https://github.com/bwesterb","followers_url":"https://api.github.com/users/bwesterb/followers","following_url":"https://api.github.com/users/bwesterb/following{/other_user}","gists_url":"https://api.github.com/users/bwesterb/gists{/gist_id}","starred_url":"https://api.github.com/users/bwesterb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bwesterb/subscriptions","organizations_url":"https://api.github.com/users/bwesterb/orgs","repos_url":"https://api.github.com/users/bwesterb/repos","events_url":"https://api.github.com/users/bwesterb/events{/privacy}","received_events_url":"https://api.github.com/users/bwesterb/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/bwesterb/django","description":"The Web framework for perfectionists with deadlines.","fork":true,"url":"https://api.github.com/repos/bwesterb/django","forks_url":"https://api.github.com/repos/bwesterb/django/forks","keys_url":"https://api.github.com/repos/bwesterb/django/keys{/key_id}","collaborators_url":"https://api.github.com/repos/bwesterb/django/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/bwesterb/django/teams","hooks_url":"https://api.github.com/repos/bwesterb/django/hooks","issue_events_url":"https://api.github.com/repos/bwesterb/django/issues/events{/number}","events_url":"https://api.github.com/repos/bwesterb/django/events","assignees_url":"https://api.github.com/repos/bwesterb/django/assignees{/user}","branches_url":"https://api.github.com/repos/bwesterb/django/branches{/branch}","tags_url":"https://api.github.com/repos/bwesterb/django/tags","blobs_url":"https://api.github.com/repos/bwesterb/django/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/bwesterb/django/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/bwesterb/django/git/refs{/sha}","trees_url":"https://api.github.com/repos/bwesterb/django/git/trees{/sha}","statuses_url":"https://api.github.com/repos/bwesterb/django/statuses/{sha}","languages_url":"https://api.github.com/repos/bwesterb/django/languages","stargazers_url":"https://api.github.com/repos/bwesterb/django/stargazers","contributors_url":"https://api.github.com/repos/bwesterb/django/contributors","subscribers_url":"https://api.github.com/repos/bwesterb/django/subscribers","subscription_url":"https://api.github.com/repos/bwesterb/django/subscription","commits_url":"https://api.github.com/repos/bwesterb/django/commits{/sha}","git_commits_url":"https://api.github.com/repos/bwesterb/django/git/commits{/sha}","comments_url":"https://api.github.com/repos/bwesterb/django/comments{/number}","issue_comment_url":"https://api.github.com/repos/bwesterb/django/issues/comments{/number}","contents_url":"https://api.github.com/repos/bwesterb/django/contents/{+path}","compare_url":"https://api.github.com/repos/bwesterb/django/compare/{base}...{head}","merges_url":"https://api.github.com/repos/bwesterb/django/merges","archive_url":"https://api.github.com/repos/bwesterb/django/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/bwesterb/django/downloads","issues_url":"https://api.github.com/repos/bwesterb/django/issues{/number}","pulls_url":"https://api.github.com/repos/bwesterb/django/pulls{/number}","milestones_url":"https://api.github.com/repos/bwesterb/django/milestones{/number}","notifications_url":"https://api.github.com/repos/bwesterb/django/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/bwesterb/django/labels{/name}","releases_url":"https://api.github.com/repos/bwesterb/django/releases{/id}","deployments_url":"https://api.github.com/repos/bwesterb/django/deployments","created_at":"2015-12-26T12:04:37Z","updated_at":"2015-12-26T12:04:54Z","pushed_at":"2016-01-07T22:17:14Z","git_url":"git://github.com/bwesterb/django.git","ssh_url":"git@github.com:bwesterb/django.git","clone_url":"https://github.com/bwesterb/django.git","svn_url":"https://github.com/bwesterb/django","homepage":"https://www.djangoproject.com/","size":143008,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":1,"mirror_url":null,"open_issues_count":0,"forks":1,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"django:master","ref":"master","sha":"7f218d98915ef3e76a98ef72075a6bde907dfe41","user":{"login":"django","id":27804,"avatar_url":"https://avatars.githubusercontent.com/u/27804?v=3","gravatar_id":"","url":"https://api.github.com/users/django","html_url":"https://github.com/django","followers_url":"https://api.github.com/users/django/followers","following_url":"https://api.github.com/users/django/following{/other_user}","gists_url":"https://api.github.com/users/django/gists{/gist_id}","starred_url":"https://api.github.com/users/django/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/django/subscriptions","organizations_url":"https://api.github.com/users/django/orgs","repos_url":"https://api.github.com/users/django/repos","events_url":"https://api.github.com/users/django/events{/privacy}","received_events_url":"https://api.github.com/users/django/received_events","type":"Organization","site_admin":false},"repo":{"id":4164482,"name":"django","full_name":"django/django","owner":{"login":"django","id":27804,"avatar_url":"https://avatars.githubusercontent.com/u/27804?v=3","gravatar_id":"","url":"https://api.github.com/users/django","html_url":"https://github.com/django","followers_url":"https://api.github.com/users/django/followers","following_url":"https://api.github.com/users/django/following{/other_user}","gists_url":"https://api.github.com/users/django/gists{/gist_id}","starred_url":"https://api.github.com/users/django/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/django/subscriptions","organizations_url":"https://api.github.com/users/django/orgs","repos_url":"https://api.github.com/users/django/repos","events_url":"https://api.github.com/users/django/events{/privacy}","received_events_url":"https://api.github.com/users/django/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/django/django","description":"The Web framework for perfectionists with deadlines.","fork":false,"url":"https://api.github.com/repos/django/django","forks_url":"https://api.github.com/repos/django/django/forks","keys_url":"https://api.github.com/repos/django/django/keys{/key_id}","collaborators_url":"https://api.github.com/repos/django/django/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/django/django/teams","hooks_url":"https://api.github.com/repos/django/django/hooks","issue_events_url":"https://api.github.com/repos/django/django/issues/events{/number}","events_url":"https://api.github.com/repos/django/django/events","assignees_url":"https://api.github.com/repos/django/django/assignees{/user}","branches_url":"https://api.github.com/repos/django/django/branches{/branch}","tags_url":"https://api.github.com/repos/django/django/tags","blobs_url":"https://api.github.com/repos/django/django/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/django/django/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/django/django/git/refs{/sha}","trees_url":"https://api.github.com/repos/django/django/git/trees{/sha}","statuses_url":"https://api.github.com/repos/django/django/statuses/{sha}","languages_url":"https://api.github.com/repos/django/django/languages","stargazers_url":"https://api.github.com/repos/django/django/stargazers","contributors_url":"https://api.github.com/repos/django/django/contributors","subscribers_url":"https://api.github.com/repos/django/django/subscribers","subscription_url":"https://api.github.com/repos/django/django/subscription","commits_url":"https://api.github.com/repos/django/django/commits{/sha}","git_commits_url":"https://api.github.com/repos/django/django/git/commits{/sha}","comments_url":"https://api.github.com/repos/django/django/comments{/number}","issue_comment_url":"https://api.github.com/repos/django/django/issues/comments{/number}","contents_url":"https://api.github.com/repos/django/django/contents/{+path}","compare_url":"https://api.github.com/repos/django/django/compare/{base}...{head}","merges_url":"https://api.github.com/repos/django/django/merges","archive_url":"https://api.github.com/repos/django/django/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/django/django/downloads","issues_url":"https://api.github.com/repos/django/django/issues{/number}","pulls_url":"https://api.github.com/repos/django/django/pulls{/number}","milestones_url":"https://api.github.com/repos/django/django/milestones{/number}","notifications_url":"https://api.github.com/repos/django/django/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/django/django/labels{/name}","releases_url":"https://api.github.com/repos/django/django/releases{/id}","deployments_url":"https://api.github.com/repos/django/django/deployments","created_at":"2012-04-28T02:47:18Z","updated_at":"2016-02-02T11:23:42Z","pushed_at":"2016-02-02T15:23:21Z","git_url":"git://github.com/django/django.git","ssh_url":"git@github.com:django/django.git","clone_url":"https://github.com/django/django.git","svn_url":"https://github.com/django/django","homepage":"https://www.djangoproject.com/","size":181497,"stargazers_count":17844,"watchers_count":17844,"language":"Python","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":7264,"mirror_url":null,"open_issues_count":95,"forks":7264,"open_issues":95,"watchers":17844,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/django/django/pulls/5876"},"html":{"href":"https://github.com/django/django/pull/5876"},"issue":{"href":"https://api.github.com/repos/django/django/issues/5876"},"comments":{"href":"https://api.github.com/repos/django/django/issues/5876/comments"},"review_comments":{"href":"https://api.github.com/repos/django/django/pulls/5876/comments"},"review_comment":{"href":"https://api.github.com/repos/django/django/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/django/django/pulls/5876/commits"},"statuses":{"href":"https://api.github.com/repos/django/django/statuses/008e0d93ce862f8202e80f70bf9e492c52a523a7"}}}}