phc-discussions - Re: [PHC] My votes as a panelist (well, some of them, for now)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 11 Feb 2015 14:05:42 -0800
From: Tony Arcieri <bascule@...il.com>
To: "discussions@...sword-hashing.net" <discussions@...sword-hashing.net>
Subject: Re: [PHC] My votes as a panelist (well, some of them, for now)

Here are mine:

---------- Forwarded message ----------
From: Tony Arcieri <bascule@...il.com>
Date: Sat, Aug 30, 2014 at 2:19 PM
Subject: Re: [PHC panel] PHC votes reminder
To: Jean-Philippe Aumasson <jeanphilippe.aumasson@...il.com>


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi J-P,

Here is my PHC vote:

FOR FINALISTS:

Yescrypt: Efficient despite complexity and resistant to a broad spectrum of
attacks
TwoCats: Neat two-loop structure to combine cache-timing resistance and
unpredictability
Catena: Novel approaches to provable cache-timing resistance
Gambit: More novel approaches to provable cache-timing resistance,
tweakability
Lyra2: Resistance to processing-memory tradeoffs

NOT FINALISTS:

AntCrypt: Inefficient and confusing
Lanarea: No rationale, confusing and gross code
RIG: Cut-and-paste from other submissions, no justification for the
combination
Schvrch: No PRFs applied to input, probably not cryptographically secure
Tortuga: Fails basic randomness tests

Best regards,
Tony

-----BEGIN PGP SIGNATURE-----
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=31c7
-----END PGP SIGNATURE-----

-- 
Tony Arcieri

Content of type "text/html" skipped