phc-discussions - Re: [PHC] EARWORM (ROM hard is not enough)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1803910473.1178425.1396880033218.open-xchange@email.1and1.com>
Date: Mon, 7 Apr 2014 09:13:53 -0500 (CDT)
From: Steve Thomas <steve@...tu.com>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] EARWORM (ROM hard is not enough)

> On April 7, 2014 at 8:54 AM Daniel Franke <dfoxfranke@...il.com> wrote:
>
> Steve Thomas <steve@...tu.com> writes:
>
> > Also loading a large ROM into memory might not be good for UX in certain
> > cases. This is OK in cases where the ROM is always in memory like
> > authentication servers, but for FDE it might be annoying waiting for it to
> > read a few gigs from disk. Although this isn't a big problem for new SSDs,
> > my craptop would take awhile.
>
> Don't use EARWORM for FDE. As discussed in the submission document, it's
> designed for authentication servers and nothing else.

Oops I guess I should read those papers. I spend all my time looking at the
code because comments and documentation can lie, code can not. Fun I say
that because I was just caught looking at a comment that "lied" :).