I’m evaluating Rust password hashing functions, specifically Argon2, scrypt, PBKDF2. I’m using the RustCrypto open source implementations.
I have three simple demos in case you want to try these yourself:
* https://github.com/joelparkerhenderson/demo-rust-argon2
* https://github.com/joelparkerhenderson/demo-rust-scrypt
* https://github.com/joelparkerhenderson/demo-rust-pbkdf2
I’m seeking advice please, such as pros and cons. The context is medical software where hashing is on generally modern machines. I’m aware of the OWASP recommendations which seem broadly helpful. Thanks!
