phc-discussions - Re: [PHC] KDF vs PHS?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-id: <9A1A7346-EC02-4B22-966C-5F3403EF7329@mac.com>
Date: Fri, 14 Mar 2014 16:44:10 -0700
From: Larry Bugbee <bugbee@....com>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] KDF vs PHS?

On Mar 9, 2014, at 4:08 PM, Bill Cox <waywardgeek@...il.com> wrote:

> On Sun, Mar 9, 2014 at 5:36 PM, Larry Bugbee <bugbee@....com> wrote:
>> On Mar 9, 2014, at 2:05 PM, Jean-Philippe Aumasson <jeanphilippe.aumasson@...il.com> wrote:
>> 
>>> KDF is obviously worse, as key derivation (that
>>> is, producing a cryptographic key from a password) is only one of the
>>> applications of password hashing.
>> 
>> KDF and its derivations are definitely inferior to PHS.  ...my opinion.
> 
> I agree.  I'll update my docs to use PHS.

Not a big deal, but upon further reflection...  

Hashing may or may not be the primary element of the scheme, and perhaps not at all.  What's really happening is we are protecting passwords, by whatever means makes sense.  Soooo...

[rhetorically] What about PPS for Password Protection Scheme?