Decrease Argon2 maximum output length

Fixes #148.
2017-04-09 17:18:26 +02:00 · 2017-04-09 17:18:26 +02:00 · 112d2fbb15
commit 112d2fbb15
parent 2d25b27042
1 changed files with 3 additions and 1 deletions
--- a/Crypto/KDF/Argon2.hs
+++ b/Crypto/KDF/Argon2.hs
@ -85,8 +85,10 @@ saltMinLength = 8
 outputMinLength :: Int
 outputMinLength = 4

+-- specification allows up to 2^32-1 but this is too big for a signed Int
+-- on a 32-bit architecture, so we limit tag length to 2^31-1 bytes
 outputMaxLength :: Int
-outputMaxLength = 0xffffffff
+outputMaxLength = 0x7fffffff

 defaultOptions :: Options
 defaultOptions =