riverrun/comeonin

Different results locally and on staging (release)

solars opened this issue · 7 comments

Hi there, I've got a problem with:

  • comeonin 4.0.3 (Hex package) (mix)
    locked at 4.0.3 (comeonin) 4e257dcb

If I run haspwsalt locally I get:

$ Comeonin.Argon2.hashpwsalt("password")
"$argon2i$v=19$m=65536,t=6,p=1$FU2xq4l/l+vETiWjL8JPrw$QD7po9EfxtQ9gIUR4KrB1BFvPbawb8qZ1ZIZy6Aatpw"

however, if I do this inside my release (bin/myapp remote_console), I get:

$ Comeonin.Argon2.hashpwsalt("password")
{<<224, 237, 149, 77, 115, 127>>,
 "$argon2i$v=19$m=65536,t=6,p=1$UgBo7muzj9LF8sLWU7gV1Q$OUiAPUZQZ/Y79nDXHUU3vZV8jsnnzNprtJqOjYv2kZs",
 {6, 16, 1, 0, true, 32, 1}}

why is that and how can I avoid it?

A bit busy at the moment, but I'll get back to you later today about this.

Thanks a lot @riverrun

What version of Argon2 are you using?

@riverrun I'm using:

  • argon2_elixir 1.2.10 (Hex package) (mix)
    locked at 1.2.10 (argon2_elixir) 587e18da

Could you try version 1.2.14?

We had some issues before with running argon2 with releases, and 1.2.14 fixed it, although the 'fix' hurts performance a bit.

Thanks a lot! This seems to work again with 1.2.14

Great to hear you got it fixed.