[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <9A043F3CF02CD34C8E74AC1594475C734471C7AE@uxcn10-6.UoA.auckland.ac.nz>
Date: Tue, 13 Aug 2013 01:52:10 +0000
From: Peter Gutmann <pgut001@...auckland.ac.nz>
To: "discussions@...sword-hashing.net" <discussions@...sword-hashing.net>
Subject: Re: [PHC] The EARWORM password hash
Samuel Neves <sneves@....uc.pt> writes:
>Since we don't know what area/latency/throughput tradeoffs Intel/AMD/future
>ARM licensees made when implementing AES-NI, it is possible that an FPGA/ASIC
>attacker could have a significant advantage over the defender. Depending on
>the scheme, bitsliced GPU AES could also perhaps be competitive.
Wait until Bitcoin II, using AES, comes out, and the AES brute-force ASICs
start to appear as they already have for SHA256...
Peter.
Powered by blists - more mailing lists