phc-discussions - Re: [PHC] Argon2 improvement thread

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 23 Jul 2015 21:40:34 +0200
From: Dmitry Khovratovich <khovratovich@...il.com>
To: "discussions@...sword-hashing.net" <discussions@...sword-hashing.net>, 
	Alex Biryukov - UNI <alex.biryukov@....lu>
Subject: Re: [PHC] Argon2 improvement thread

To all participants and the panel:

We are now seriously discussing major changes such as MAXFORM, and will
send a detailed reply on this issue tomorrow.

Regarding API. there is no objection to minor changes, but the hybrid (half
data-dependent, half data-independent) algorithm is a very delicate issue,
and we're still discussing it.

Merging Argon2d and Argon2i into one algorithm is a good idea to eliminate
code repetition, but we must ensure that a user does not consider them
equivalent.

Please do not hurry.

Best regards,
the Argon team

On Thu, Jul 23, 2015 at 6:58 PM, Bill Cox <waywardgeek@...il.com> wrote:

> On Thu, Jul 23, 2015 at 6:33 AM, Jean-Philippe Aumasson <
> jeanphilippe.aumasson@...il.com> wrote:
>
>>
>>
>> On Thu, Jul 23, 2015 at 3:09 AM Solar Designer <solar@...nwall.com>
>> wrote:
>>
>>> On Wed, Jul 22, 2015 at 03:33:59PM -0700, Bill Cox wrote:
>>> JP - please keep track of one more tweak requested by several people now
>>> (and which I support) - merging 2d and 2i into one, with a flag or a
>>> tri-state parameter.  Somehow you did not list it in your summary
>>> message.
>>>
>>>
>> Done. Anyone can edit the document though, at
>>
>> https://docs.google.com/document/d/1AHAZaA6yU8xFXA1bBoqKTbgWiY0jItNnkXV2cR9_Bcg/edit?usp=sharing
>>
>
> It would be good to hear from the Argon2 team about this concept.  I would
> be happy to attempt to merge the two algorithms with a tri-state parameter,
> as a fork on github.  Would that be worthwhile?
>
> I'm glad to hear Alexander has benchmarks showing low impact when
> integrating maxform.  That's great news.  Where is the code?  I prefer the
> code to any other description.
>
> Bill
>



-- 
Best regards,
Dmitry Khovratovich

Content of type "text/html" skipped