From 9407cc966b02e5ef69b7f561a6b972aff5d9c2e0 Mon Sep 17 00:00:00 2001 From: Bas Westerbaan Date: Fri, 27 May 2016 10:41:52 +0200 Subject: [PATCH] Fixed #26635 -- Clarified Argon2PasswordHasher's memory_cost differs from command line utility. --- docs/topics/auth/passwords.txt | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/topics/auth/passwords.txt b/docs/topics/auth/passwords.txt index 3736f16ec6..8e8271086f 100644 --- a/docs/topics/auth/passwords.txt +++ b/docs/topics/auth/passwords.txt @@ -232,6 +232,12 @@ follows: Pick a ``time_cost`` that takes an acceptable time for you. If ``time_cost`` set to 1 is unacceptably slow, lower ``memory_cost``. +.. admonition:: ``memory_cost`` interpretation + + The argon2 command-line utility and some other libraries interpret the + ``memory_cost`` parameter differently from the value that Django uses. The + conversion is given by ``memory_cost == 2 ** memory_cost_commandline``. + .. _password-upgrades: Password upgrading