phc-discussions - Re: [PHC] Review summary so far

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 31 Aug 2014 16:49:57 +0200
From: Jean-Philippe Aumasson <jeanphilippe.aumasson@...il.com>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] Review summary so far

Thanks Bill for your reviews, these will be helpful to the panel when
selecting the finalists.

On Sun, Aug 31, 2014 at 1:17 PM, Bill Cox <waywardgeek@...hershed.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> In case there is too much to read, here's my scorecard from my the
> review per day so far (RIG through Yescript):
>
> Better than Scrypt
>
> - - TwoCats
> - - Yescrypt
>
> Good algorithms, but worse than Scrypt
>
> - - Yarn
>
> Dangerously insecure
>
> - - RIG
> - - Schvrch
> - - Tortuga
>
>
>
> I also am tracking 5 categories of algorithm, and here's my current
> favorites (including ones I need to review in more depth):
>
> - - Script replacement category: Yescrypt
> - - Bcrypt replacement category: PufferFish
> - - Catena-like: Catena
> - - Authentication server category: Yescrypt
> - - Other: Makwa
>
> Yescrypt wins authentication server and Scrypt replacement, and it
> competes OK in Bcrypt replacement in performance, though it's
> complexity makes it not very bcrypt-like.  It's still the leading
> contender in my view.
>
> Bill
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQIcBAEBAgAGBQJUAwQ4AAoJEAcQZQdOpZUZTbIP/2vV/X/1Ynu3soPBxlbPO4JX
> qlpVANtOuhN3RV16yYFZTvFGqpJFCGBe1AkK8oES0MPusr95O8nFZ6AvrdePLemP
> qI3TmAn9qtP+D5Dbw3d9b+1UUJS1GjxX06s+25tSGpi7Pl61sLvTMAl9n63SiPqj
> ZwEzfWtUg7Hqp1Wra4UJLCijFmg0uubVzmY8np80Vykce2SzL1YFMCzTmH4sj1X/
> 1nnzBlMIl1V8s0ZdaVPoXwL2cNlVz2ogGjc8amsKffIqTyFrdkuQuq08FUaZxEdK
> GEY3xwefx6dijCrZ/tvoh9K3m6VY9CJ/N/EmZXrFW0ElxMhlf2/7D/H1Zd3z6Ss+
> G2IPdT5itBOoDsJaUs5JKjy6tUjJV0Rj2Uk9GxObnftMBK4jnJd3d9THV+SLtYBk
> 7SEOyUbmmv3SEmnh3qR2UFaKhQpyiHRawVc4Fu2KZMiQNavzXC/RKl2BSMTXlPVE
> 0fw5NN2fCPCqdDbbgelhjpQz5WhfbHyBDd1MYaK/OE3BhheNXBv8GC+Gqs5XPgg7
> RN8UOv0SzQ2S2Cueb3sV8YkInAX+5aDpHH/t/E9FLLGRhcQ2OG0xuO2mUTLdONIw
> jkjdMSwTLEuX0lNr4JcgOSAgjK2ycInW6oxErCL7nB0NcG6imUujU6pC5A5XRmpA
> 6jhcS66s7gOzS8ZRsy8q
> =Qurs
> -----END PGP SIGNATURE-----