Build & port
Developers
Install from NuGet, PyPI, npm, or crates.io; call the API; match official vectors bit-exactly.
Experimental memory-hard hashing for ports, benchmarks, and cryptanalysis — not for production passwords.
Prefer Argon2id, scrypt, bcrypt, or platform APIs for real storage.
Build & port
Install from NuGet, PyPI, npm, or crates.io; call the API; match official vectors bit-exactly.
Study & audit
Specs, uniqueness campaigns, peer KDF benches, Collision Lab, and the X sandbox paper.
Conformance
BLAKE3-backed line for ports and vectors. Encoded as forgeh / v=1.
Sandbox
Research-only ForgeX sponge — no BLAKE3. Encoded as forgehx / v=0. Digests are not compatible with B3.
Base64 is RFC 4648 without padding. Parameter order is always m,t,p.
| Profile | Memory | Iterations | Parallelism |
|---|---|---|---|
| Development | 8192 KiB | 1 | 1 |
| Interactive | 65536 KiB | 3 | 1 |
| Sensitive | 262144 KiB | 4 | 2 |
Development must never be silently selected in production-shaped builds.