Skip to content

[Sync-EN] Clarify the Argon2 memory_cost and time_cost units - #1788

Open
lacatoire wants to merge 1 commit into
php:masterfrom
lacatoire:sync-en/1620
Open

[Sync-EN] Clarify the Argon2 memory_cost and time_cost units#1788
lacatoire wants to merge 1 commit into
php:masterfrom
lacatoire:sync-en/1620

Conversation

@lacatoire

Copy link
Copy Markdown
Member

Syncs reference/password/constants.xml and reference/password/functions/password-hash.xml with php/doc-en#5219.

  • PASSWORD_ARGON2_DEFAULT_MEMORY_COST is documented in kibibytes, not bytes.
  • time_cost and PASSWORD_ARGON2_DEFAULT_TIME_COST are a number of iterations (passes), not a time limit. Both pages said "maximum amount of time", which described neither the unit nor the behaviour.
  • PASSWORD_BCRYPT_DEFAULT_COST had two empty paragraphs; it is now described as the default algorithmic cost used by password_hash() with PASSWORD_BCRYPT, available as of PHP 7.0.0.

EN-Revision bumped to 6cc48aed6f887bdabf09c568f854099f9c74e017 on both files.

Fixes: #1620

@lacatoire
lacatoire requested a review from a team as a code owner August 31, 2026 11:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Sync EN] Clarify Argon2 memory_cost and time_cost units in password_hash()

1 participant