nebulae.dotArgon2 0.7.12

nebulae.dotArgon2

A minimal, fast, cross-platform Argon2 wrapper for .NET applications.

This library provides access to native Argon2id, Argon2i, and Argon2d password hashing using optimized AVX2-enabled builds of the official reference implementation.

Features

• Supports Argon2id, Argon2i, and Argon2d
• Exposes both raw byte output and encoded string output
• Full control over all parameters: memory cost, time cost, parallelism (nothing is hidden away, so you can follow OWASP recommendations)
• Cross-platform support: Windows, Linux, macOS
• Ships with native binaries: .dll, .so, .dylib
• Built against the SIMD-optimized version of the Argon2 reference implementation
• Requires AVX2 instruction set (x86_64 only)

Requirements

• .NET 8 or later
• AVX2-capable CPU (required for the optimized native library)
• Windows x64, Linux x64, or macOS x64/arm64

Note: On macOS, the library ships as a universal dylib supporting both Intel and Apple Silicon. The arm64 build uses the reference (non-AVX2) implementation.

Usage

For general usage, it is recommended to use the encoded string output for password hashing. If you do so you can use the built-in verification functions. Otherwise, you must re-compute the hash using the same original settings and compare the raw hashes yourself.

Important: salts are required to be at least 8 bytes in length; this is a requirement of the underlying Argon2 library.

using nebulae.dotArgon2;

// Ensure native library is loaded (no longer necessary in recent versions)
// Argon2.Init();

// Set inputs
byte[] password = Encoding.UTF8.GetBytes("correct horse battery staple");
byte[] salt = Encoding.UTF8.GetBytes("sodiumchloride");

// Choose the variant
var algorithm = Argon2.Argon2Algorithm.Argon2id;

// Hash to a raw 32-byte buffer
byte[] rawHash = Argon2.Argon2HashRaw(
    algorithm,
    timeCost: 2,
    memCost: 65536,
    parallelism: 2,
    password,
    salt,
    hashLength: 32);

// Get a base64-compatible encoded string
string encoded = Argon2.Argon2HashEncodedToString(
    algorithm,
    timeCost: 2,
    memCost: 65536,
    parallelism: 2,
    password,
    salt);

// Verify the encoded hash using the original password
bool isValid = Argon2.VerifyEncoded(algorithm, encoded, password);

Installation

You can install the package via NuGet:

$ dotnet add package nebulae.dotArgon2

Or via git:

$ git clone https://github.com/nebulaeonline/dotArgon2.git
$ cd dotArgon2
$ dotnet build

License

MIT

Roadmap

• Secure memory clearing for sensitive hash buffers