suggestion: add `bcrypt` and `argon2` support to `std/crypto`

[rossholdway]

Is your feature request related to a problem? Please describe.

Thoughts on supporting something such as Bun.password - https://bun.sh/docs/api/hashing ?

Describe the solution you'd like

Perhaps std/crypto would be a good place to support something similar? Wrapping the native Rust implementation(s) via WASM.

Describe alternatives you've considered

Currently to use something like argon2 or bcrypt with Deno, you must find and trust a third-party developers wrapper, or attempt bindings yourself. Providing this as part of std/crypto, a trusted dependancy, could help to improve security for those needing password hashing, and improve ease of implementation.

Thanks!

[iuioiua]

My immediate impression is that a new API isn't needed. Rather, we could add documentation to @std/crypto, if anything.

[rossholdway]

Thanks for the comment @iuioiua, although I have to admit I don’t quite understand. I can’t see how this could be achieved using the current @std/crypto?

[halvardssm]

FYI, I have already done some of the prework for supporting password hashing in the crypto module in stdext. This can be moved to std if the team wants to add support for password hashing in the future 💪🏻

[rossholdway]

With the introduction of Deno 2.1 and direct Wasm imports, does this change anything here?

[kt3k]

We already use wasm in std/crypto implementation https://github.com/denoland/std/tree/main/crypto/_wasm

Do you suggest adding bcrypt and argon2 to std/crypto digest API? Or do you suggest API specific to password hashing?

[rossholdway]

@kt3k bcrypt and argon2 in std/crypto digest API would be great. Perhaps with a supporting example at https://docs.deno.com/examples.

A password specific hashing API would make for a nice developer experience, but perhaps something that could come later, building on top of digest API support.

[faipena]

Is there any progress on the argon2 support? That would be great for modern webapps opting to choose deno.
How hard of a change is it? Would it be manageable for a first time contributor? What would be the required sub-tasks? I would love to help if able to!