argon2id-owasp-2024-params-for-password-hashing
OWASP 2024-recommended argon2id parameters for production password hashing: time_cost=3, memory_cost=65536 (64 MB), parallelism=4. Combined with zxcvbn strength score ≥ 3 and minimum 12-character policy. Constant-time dummy hash is performed on unknown-email lookups to eliminate timing side-channels.