phc-discussions - Re: [PHC] Terminology goals

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 21 Aug 2013 01:30:41 +0000
From: Peter Gutmann <pgut001@...auckland.ac.nz>
To: "discussions@...sword-hashing.net" <discussions@...sword-hashing.net>
Subject: Re: [PHC] Terminology goals

Jean-Philippe Aumasson <jeanphilippe.aumasson@...il.com> writes:

>Agree with the need for a name better than "password hashing scheme", or
>"password hash".

In crypto mechanisms the term "derivation" has been used for some time, e.g.
"Key Derivation Scheme".  Unfortunately it describes the target, not the
source, so "Password Derivation Scheme" gets it backwards.  Is there an
inverse of "Derivation"?

Having said that, the term PHC already has enough traction that it's probably
too late to change it now.

>Perhaps we should organize a separate competition: The Password Hash Naming
>Competition.

No, it'd be the Password Hash Bikeshedding Competition.  The arguments would
still be raging five years after the PHC itself closes.

Peter.