kratos hashers argon2 calibrate

Computes Optimal Argon2 Parameters

Synopsis

This command helps you calibrate the configuration parameters for Argon2. Password hashing is a trade-off between security, resource consumption, and user experience. Resource consumption should not be too high and the login should not take too long.

We recommend that the login process takes between half a second and one second for password hashing, giving a good balance between security and user experience.

Please note that the values depend on the machine you run the hashing on. If you have RAM constraints, please set the memory dedicated to Ory Kratos to avoid out of memory panics.

kratos hashers argon2 calibrate <requests-per-minute> [flags]

Options

      --adjust-memory-by byte_size    Amount by which the memory is adjusted in every step while probing. (default 512.00MB)
  -c, --config strings                Path to one or more .json, .yaml, .yml, .toml config files. Values are loaded in the order provided, meaning that the last config file overwrites values from the previous config file.
      --dedicated-memory byte_size    Amount of memory dedicated for password hashing. Kratos will try to not consume more memory. (default 1.00GB)
      --expected-deviation duration   Expected deviation of the time a hashing operation (~login request) takes. (default 500ms)
      --format string                 Set the output format. One of table, json, yaml, json-pretty, jsonpath and jsonpointer. (default "default")
  -h, --help                          help for calibrate
      --key-length uint32             Length of the key in bytes. (default 32)
      --max-concurrent uint8          Maximum number of concurrent hashing operations. (default 16)
      --max-memory byte_size          Maximum memory allowed (0 means no limit). (default 0.00B)
      --min-duration duration         Minimal duration a hashing operation (~login request) takes. (default 500ms)
      --parallelism uint8             Number of threads to use. (default 8)
  -r, --probe-runs int                Runs per probe, median of all runs is taken as the result. (default 2)
  -q, --quiet                         Be quiet with output printing.
      --salt-length uint32            Length of the salt in bytes. (default 16)
  -i, --start-iterations uint32       Number of iterations to start probing at. (default 1)
  -m, --start-memory byte_size        Amount of memory to start probing at. (default 0.00B)