phc-discussions - Review Summary

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <5414B160.3040602@ciphershed.org>
Date: Sat, 13 Sep 2014 17:04:32 -0400
From: Bill Cox <waywardgeek@...hershed.org>
To: discussions@...sword-hashing.net
Subject: Review Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

After my fairly extensive review, here is the list of algorithms I am
personally still quite interested in, by category.  Note that I
repeated Yescrypt in each category it competes in:

Authentication Servers
- ----------------------
EARWORM (if fixed)
Yescrypt

GPU Defense (bcrypt-like)
- -------------------------
BattCrypt
POMELO
PufferFish
Yescrypt

Large Memory-Hashing (Scrypt-like)
- ----------------------------------
Lyra2
TwoCats
Yescrypt

Cache-Timing Resistant
- ----------------------
Catena
Gambit

Great Ideas*
- ------------
AntCrypt
Makwa
Parallel
Schvrch**

* PolyPassHash is a great idea, but not directly a password hashing
scheme or hashing function
** I have not read about Schvrch's algorithm, so I'm taking other
people's word that this is a great idea.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJUFLFcAAoJEAcQZQdOpZUZDFUQAI9A2TEoDNT72oPIQ5gPrTVh
hi7d8uh4Gy3fQw7g20rrShcoIAoptC1hjrK5ZLCkj4xbVqf9UiCoU/wDO5MWICU1
z0CdRyUy1SU67HoI6CJCgp1b6ViP67XpIpf/tcGtKbQRNs57bwQPCXKWCnSRt3vY
s4anrpbosOZOsPu8y1KURcrGFJMEQDihdUpN7WMCtc9LJPJwDzJUYAVrLOzpM+X2
f3LpLMd0/VhzMNrbLvsW+TKsmGNWVVNjqvACmJCoAQRbjRNPWexBAFAgrix5b/Dr
Z1wzAXtOf9jptNBX7VyFmXieGae3E94jometyFeIMk8icWLrTWOz43STQkD/iZuX
DnUYizSw+sIl38FI/QiC07z2ppFjHjjbOJhS2HiPaVgD9W1nUOLIPa1kCm8lc5q5
FeXmrqzxb5W/5ng/VHEBY9JfMRLOuhJR9twiTAloGSSXscyTrI6f5gUfF9CZsVHZ
m9u5CXsYSBzmeSfdO7524Z8uAzLji5+5RZhxSqmnVSWmLgN54B0qmzrzKNfctRn/
6M5f1YFDgz/G4iknX/gH0rIIEX1ep3fHv6NkViaPizttuS56NEbozo8eFPtOWzyK
+4kp1uSVqUi39s0JSaxRebhjNj5SSw3ju4VAGeXEBku8g7De8VebN4Zfs4xWkPQd
MtXdYaWeU2Z3dMU09fGi
=/5vd
-----END PGP SIGNATURE-----