lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 21 Aug 2013 01:30:41 +0000
From: Peter Gutmann <>
To: "" <>
Subject: Re: [PHC] Terminology goals

Jean-Philippe Aumasson <> writes:

>Agree with the need for a name better than "password hashing scheme", or
>"password hash".

In crypto mechanisms the term "derivation" has been used for some time, e.g.
"Key Derivation Scheme".  Unfortunately it describes the target, not the
source, so "Password Derivation Scheme" gets it backwards.  Is there an
inverse of "Derivation"?

Having said that, the term PHC already has enough traction that it's probably
too late to change it now.

>Perhaps we should organize a separate competition: The Password Hash Naming

No, it'd be the Password Hash Bikeshedding Competition.  The arguments would
still be raging five years after the PHC itself closes.


Powered by blists - more mailing lists