Migrate password hashing functions (PBKDF2, Scrypt, etc..) to Argon2id

[RichardFevrier]

Hello everybody 👋 thank you for your amazing work !

I was wondering now that the hashing function Argon2id is available in the official crypto module if it was not the time to migrate the current Cozy's password hashing stack ?

[nono]

I don't think so. Argon2id is known as complicated to correctly tune for the environment (from OWASP) and the current password hashing function is not deprecated or with known vulnerabilities. It would take time to write a migration to Argon2id, and I really think that this time is better use for other purpose.