{"action":"opened","issue":{"url":"https://api.github.com/repos/terl/lazysodium-java/issues/39","repository_url":"https://api.github.com/repos/terl/lazysodium-java","labels_url":"https://api.github.com/repos/terl/lazysodium-java/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/terl/lazysodium-java/issues/39/comments","events_url":"https://api.github.com/repos/terl/lazysodium-java/issues/39/events","html_url":"https://github.com/terl/lazysodium-java/issues/39","id":358341757,"node_id":"MDU6SXNzdWUzNTgzNDE3NTc=","number":39,"title":"cryptoPwHashStrVerify sometimes has false negatives","user":{"login":"Quackster","id":1328523,"node_id":"MDQ6VXNlcjEzMjg1MjM=","avatar_url":"https://avatars3.githubusercontent.com/u/1328523?v=4","gravatar_id":"","url":"https://api.github.com/users/Quackster","html_url":"https://github.com/Quackster","followers_url":"https://api.github.com/users/Quackster/followers","following_url":"https://api.github.com/users/Quackster/following{/other_user}","gists_url":"https://api.github.com/users/Quackster/gists{/gist_id}","starred_url":"https://api.github.com/users/Quackster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Quackster/subscriptions","organizations_url":"https://api.github.com/users/Quackster/orgs","repos_url":"https://api.github.com/users/Quackster/repos","events_url":"https://api.github.com/users/Quackster/events{/privacy}","received_events_url":"https://api.github.com/users/Quackster/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-09T01:49:59Z","updated_at":"2018-09-09T01:49:59Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\n\r\nWhen using cryptoPwHashStrVerify argon2 hashing for my project, sometimes the password verification fails (sometimes a lot) despite the password being entered correctly.\r\n\r\nSample code (verifies a password that is \"lol\" when not hashed):\r\n\r\n```while (true) {\r\n    byte[] hashedPassword = \"$argon2id$v=19$m=65536,t=2,p=1$ZrWMVZiMs4tvs0QwVc7T7A$LIl6XlgIZsuozRpC3bCe5ew8LEWgDQvQE8qwsZ9ISps\".getBytes(StandardCharsets.UTF_8);\r\n    byte[] pass = \"lol\".getBytes(StandardCharsets.UTF_8);\r\n\r\n    PwHash.Native pwHash = (PwHash.Native) PlayerDao.LIB_SODIUM;\r\n    boolean success = pwHash.cryptoPwHashStrVerify(hashedPassword, pass, pass.length);\r\n\r\n    if (!success) {\r\n        System.out.println(\"Failure\");\r\n        break;\r\n    } else {\r\n        System.out.println(\"Success\");\r\n    }\r\n}```\r\n\r\nDemonstration:\r\n\r\n![](https://i.imgur.com/Pf3wvxs.gif)\r\n\r\nPlease fix this. 😢 \r\n"}}
{"actor":{"display_login":"Quackster"}}