chore: upgrade argon2 #2232

Merged

ginger merged 1 commit from Henry-Hiles/continuwuity:quad/feat/bump-stuff into main 2026-09-12 16:04:14 +00:00

Conversation 4 Commits 1 Files changed 4 +33 -27

Henry-Hiles commented 2026-09-11 19:18:02 +00:00

Member

Copy link

We are swapping from the rand_core to the getrandom feature to simplify hashing. Closes #1496, closes #2200.

Pull request checklist:

• This pull request targets the main branch, and the branch is named something other than
  main.
• I have written an appropriate pull request title and my description is clear.
• I understand I am responsible for the contents of this pull request.
• I have followed the contributing guidelines:
  • My contribution follows the code style, if applicable.
  • I ran pre-commit checks before opening/drafting this pull request.
  • I have tested my contribution (or proof-read it for documentation-only changes)
    myself, if applicable. This includes ensuring code compiles.
  • My commit messages follow the commit message format and are descriptive.

We are swapping from the `rand_core` to the `getrandom` feature to simplify hashing. Closes #1496, closes #2200. <!-- In order to help reviewers know what your pull request does at a glance, you should ensure that 1. Your PR title is a short, single sentence describing what you changed 2. You have described in more detail what you have changed, why you have changed it, what the intended effect is, and why you think this will be beneficial to the project. If you have made any potentially strange/questionable design choices, but didn't feel they'd benefit from code comments, please don't mention them here - after opening your pull request, go to "files changed", and click on the "+" symbol in the line number gutter, and attach comments to the lines that you think would benefit from some clarification. --> <!-- Example: This pull request allows us to warp through time and space ten times faster than before by double-inverting the warp drive with hyperheated jump fluid, both making the drive faster and more efficient. This resolves the common issue where we have to wait more than 10 milliseconds to engage, use, and disengage the warp drive when travelling between galaxies. --> <!-- Closes: #... --> <!-- Fixes: #... --> <!-- Uncomment the above line(s) if your pull request fixes an issue or closes another pull request by superseding it. Replace `#...` with the issue/pr number, such as `#123`. --> **Pull request checklist:** <!-- You need to complete these before your PR can be considered. If you aren't sure about some, feel free to ask for clarification in #dev:continuwuity.org. --> - [x] This pull request targets the `main` branch, and the branch is named something other than `main`. - [x] I have written an appropriate pull request title and my description is clear. - [x] I understand I am responsible for the contents of this pull request. - I have followed the [contributing guidelines][c1]: - [x] My contribution follows the [code style][c2], if applicable. - [ ] I ran [pre-commit checks][c1pc] before opening/drafting this pull request. - [ ] I have [tested my contribution][c1t] (or proof-read it for documentation-only changes) myself, if applicable. This includes ensuring code compiles. - [x] My commit messages follow the [commit message format][c1cm] and are descriptive. <!-- Notes on these requirements: - While not required, we encourage you to sign your commits with GPG or SSH to attest the authenticity of your changes. - While we allow LLM-assisted contributions, we do not appreciate contributions that are low quality, which is typical of machine-generated contributions that have not had a lot of love and care from a human. Please do not open a PR if all you have done is asked ChatGPT to tidy up the codebase with a +-100,000 diff. - In the case of code style violations, reviewers may leave review comments/change requests indicating what the ideal change would look like. For example, a reviewer may suggest you lower a log level, or use `match` instead of `if/else` etc. - In the case of code style violations, pre-commit check failures, minor things like typos/spelling errors, and in some cases commit format violations, reviewers may modify your branch directly, typically by making changes and adding a commit. Particularly in the latter case, a reviewer may rebase your commits to squash "spammy" ones (like "fix", "fix", "actually fix"), and reword commit messages that don't satisfy the format. - Pull requests MUST pass the `Checks` CI workflows to be capable of being merged. This can only be bypassed in exceptional circumstances. If your CI flakes, let us know in matrix:r/dev:continuwuity.org. - Pull requests have to be based on the latest `main` commit before being merged. If the main branch changes while you're making your changes, you should make sure you rebase on main before opening a PR. Your branch will be rebased on main before it is merged if it has fallen behind. - We typically only do fast-forward merges, so your entire commit log will be included. Once in main, it's difficult to get out cleanly, so put on your best dress, smile for the cameras! --> [c1]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md [c2]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/docs/development/code_style.mdx [c1pc]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#pre-commit-checks [c1t]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#running-tests-locally [c1cm]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#commit-messages

Henry-Hiles added 1 commit 2026-09-11 19:18:02 +00:00

chore: upgrade argon2 ... a4da5e991d

We are swapping from the `rand_core` to the `getrandom` feature to simplify hashing.

forgejo-actions added the

Dependencies

Changelog

Missing

labels 2026-09-11 19:18:04 +00:00

Henry-Hiles changed title from chore: upgrade argon2 to WIP: chore: upgrade argon2 2026-09-11 19:20:19 +00:00

Henry-Hiles force-pushed quad/feat/bump-stuff from a4da5e991d to 62699e1c71 2026-09-11 19:20:49 +00:00 Compare

Henry-Hiles added

Changelog

None

and removed

Changelog

Missing

labels 2026-09-11 19:20:59 +00:00

Henry-Hiles changed title from WIP: chore: upgrade argon2 to chore: upgrade argon2 2026-09-11 19:21:00 +00:00

Aranjedeath changed title from chore: upgrade argon2 to WIP: chore: upgrade argon2 2026-09-11 19:23:51 +00:00

Aranjedeath changed title from WIP: chore: upgrade argon2 to chore: upgrade argon2 2026-09-11 19:23:53 +00:00

Aranjedeath requested review from nex 2026-09-11 19:23:58 +00:00

nex approved these changes 2026-09-11 19:24:46 +00:00

nex left a comment

Copy link

Approving with a security hat on, the code change also looks fine, I'd advise testing that it works but I don't see anything that could go wrong here

Approving with a security hat on, the code change also looks fine, I'd advise testing that it works but I don't see anything that could go wrong here

Henry-Hiles commented 2026-09-11 19:25:17 +00:00

Author

Member

Copy link

The tests in that file pass:

running 2 tests
test utils::hash::argon::tests::password_hash_and_verify ... ok

thread 'utils::hash::argon::tests::password_hash_and_verify_fail' (1941187) panicked at src/core/utils/hash/argon.rs:64:51:
unverified: invalid password
stack backtrace:
   0: __rustc::rust_begin_unwind
             at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:679:5
   1: core::panicking::panic_fmt
             at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/panicking.rs:80:14
   2: core::result::unwrap_failed
             at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/result.rs:1870:5
   3: <core::result::Result<(), conduwuit_core::error::Error>>::expect
             at /nix/store/fi08zi67hm73l3dzsaazf38fzqhn98lq-rust-mixed/lib/rustlib/src/rust/library/core/src/result.rs:1183:23
   4: conduwuit_core::utils::hash::argon::tests::password_hash_and_verify_fail
             at ./utils/hash/argon.rs:64:45
   5: conduwuit_core::utils::hash::argon::tests::password_hash_and_verify_fail::{closure#0}
             at ./utils/hash/argon.rs:59:36
   6: <conduwuit_core::utils::hash::argon::tests::password_hash_and_verify_fail::{closure#0} as core::ops::function::FnOnce<()>>::call_once
             at /nix/store/fi08zi67hm73l3dzsaazf38fzqhn98lq-rust-mixed/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
   7: <fn() -> core::result::Result<(), alloc::string::String> as core::ops::function::FnOnce<()>>::call_once
             at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/ops/function.rs:250:5
note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace.
test utils::hash::argon::tests::password_hash_and_verify_fail - should panic ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 73 filtered out; finished in 0.67s

The tests in that file pass: ``` running 2 tests test utils::hash::argon::tests::password_hash_and_verify ... ok thread 'utils::hash::argon::tests::password_hash_and_verify_fail' (1941187) panicked at src/core/utils/hash/argon.rs:64:51: unverified: invalid password stack backtrace: 0: __rustc::rust_begin_unwind at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:679:5 1: core::panicking::panic_fmt at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/panicking.rs:80:14 2: core::result::unwrap_failed at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/result.rs:1870:5 3: <core::result::Result<(), conduwuit_core::error::Error>>::expect at /nix/store/fi08zi67hm73l3dzsaazf38fzqhn98lq-rust-mixed/lib/rustlib/src/rust/library/core/src/result.rs:1183:23 4: conduwuit_core::utils::hash::argon::tests::password_hash_and_verify_fail at ./utils/hash/argon.rs:64:45 5: conduwuit_core::utils::hash::argon::tests::password_hash_and_verify_fail::{closure#0} at ./utils/hash/argon.rs:59:36 6: <conduwuit_core::utils::hash::argon::tests::password_hash_and_verify_fail::{closure#0} as core::ops::function::FnOnce<()>>::call_once at /nix/store/fi08zi67hm73l3dzsaazf38fzqhn98lq-rust-mixed/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5 7: <fn() -> core::result::Result<(), alloc::string::String> as core::ops::function::FnOnce<()>>::call_once at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/ops/function.rs:250:5 note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace. test utils::hash::argon::tests::password_hash_and_verify_fail - should panic ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 73 filtered out; finished in 0.67s ```

lveneris approved these changes 2026-09-11 19:32:11 +00:00

lveneris left a comment

Copy link

i checked, and this still uses system RNG (via password-hash -> phc -> getrandom), so i cannot see any issues here

i checked, and this still uses system RNG (via password-hash -> phc -> getrandom), so i cannot see any issues here

Henry-Hiles commented 2026-09-11 20:11:47 +00:00

Author

Member

Copy link

Can confirm it works when making an account on main, then updating to this PR, can still log in.

Can confirm it works when making an account on main, then updating to this PR, can still log in.

❤️ 1

Henry-Hiles force-pushed quad/feat/bump-stuff from 62699e1c71 to b221a49b77 2026-09-11 20:13:12 +00:00 Compare

ginger approved these changes 2026-09-12 16:03:57 +00:00

ginger merged commit b221a49b77 into main 2026-09-12 16:04:14 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

nex

lveneris

ginger

Labels

Clear labels   

Abandoned

This pull request appears to be abandoned by its author.

  

Blocked

This pull request or issue is currently blocked from being merged/closed

  

Bug

Something isn't working as intended

  

Changelog

Added

Changelog entry added

  

Changelog

Missing

No changelog when one is needed

  

Changelog

None

Changelog is unnecesary for this change

  

Cherry-picking

Commits picked from other conduit projects

  

Database

This requires or includes changes to the database

  

Dependencies

Something dependency related

  

Dependencies/Renovate

Automatic dependency upgrades by Renovate

  

Difficulty

Easy

Low difficulty to implement - touches few parts of the codebase, low complexity

  

Difficulty

Hard

High difficulty to implement - touches many parts of the codebase, high complexity

  

Difficulty

Medium

Medium difficulty to implement - touches more parts of the codebase, higher complexity

  

Documentation

Improvements or additions to documentation

  

Enhancement

New feature or request

  

Good first issue

Good for newcomers

  

Help wanted

Additional eyes and keyboards are required for this one

  

Inherited

Issues that have been inhereted from the project pre-fork

  

Matrix/Administration

Features pertaining to homeserver administration

  

Matrix/Appservices

Features pertaining to the appservice API

  

Matrix/Auth

Features pertaining to authentication

  

Matrix/Client

Features pertaining to client-to-server interactions

  

Matrix/Core

Issues relating to core matrix functionality, such as state resolution and PDU formats

  

Matrix/E2EE

Issues related to end to end encryption

  

Matrix/Federation

Features pertaining to server-to-server interactions

  

Matrix/Hydra

Issues related to room version 12 and related changes (temporary label)

  

Matrix/MSC

Features pertaining to unstable matrix features

  

Matrix/Media

Features pertaining to media interactions

  

Matrix/T&S

Changes or issues related to trust & safety tooling

  

Merge

This PR is ready to be merged

  

Merge/Manual

This PR should be manually merged

  

Merge/Squash

This PR should be squashed when it is merged

  

Meta

Related to housekeeping, maintenance, or other repo-meta.

  

Meta/CI

Issues related to CI changes

  

Meta/Packaging

Packaging

  

Priority

Blocking

This issue is blocking the next release

  

Priority

High

This issue is very important

  

Priority

Low

This issue is of a rather low priority

  

Security

This item is related to general security

  

Status

Confirmed

This issue has enough information and is confirmed

  

Status

Duplicate

This issue or pull request already exists

  

Status

Invalid

This issue doesn't seem right

  

Status

Needs Investigation

This issue needs further investigation

  

Support

Questions or support requests

  

bob the builder

pdu logic rewrite starring nexus nicholson

No labels

Abandoned

Blocked

Bug

Changelog

Added

Changelog

Missing

Changelog

None

Cherry-picking

Database

Dependencies

Dependencies/Renovate

Difficulty

Easy

Difficulty

Hard

Difficulty

Medium

Documentation

Enhancement

Good first issue

Help wanted

Inherited

Matrix/Administration

Matrix/Appservices

Matrix/Auth

Matrix/Client

Matrix/Core

Matrix/E2EE

Matrix/Federation

Matrix/Hydra

Matrix/MSC

Matrix/Media

Matrix/T&S

Merge

Merge/Manual

Merge/Squash

Meta

Meta/CI

Meta/Packaging

Priority

Blocking

Priority

High

Priority

Low

Security

Status

Confirmed

Status

Duplicate

Status

Invalid

Status

Needs Investigation

Support

bob the builder

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

4 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

continuwuation/continuwuity!2232

No description provided.