phc-discussions - Re: [PHC] Worst of PHC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <53FD0B32.9090309@ciphershed.org>
Date: Tue, 26 Aug 2014 18:33:22 -0400
From: Bill Cox <waywardgeek@...hershed.org>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] Worst of PHC

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/26/2014 05:39 PM, Tony Arcieri wrote:
> Hi there, I'm a PHC judge. I think I may have inadvertently altered
> the whole course of password hashing discussion from "Just use
> bcrypt" to "Whoa, there are more options" via an inflammatory blog
> post. ;)
> 
> That said, J-P's rules for judges stipulate picking my favorite 5
> winners and 5 losers. I have really loved Bill Cox's analysis on
> things that are clear winners and think I have OK opinions on that,
> but I am completely at a loss to pick clear losers.
> 
> I'm not sure if this really fits the rules, but I'd love to hear
> people's thoughts on the worst of the PHC. Apologies to J-P if
> asking for this sort of thing is rude.

Sorry, but public flogging of clear losers wont do anyone any good.
It might be fun, though :-)  Now, over a beer, I'd be happy to tell
you my thoughts...

Bill
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=LYph
-----END PGP SIGNATURE-----