phc-discussions - Re: [PHC] PHC status report

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20150212012835.GA10571@openwall.com>
Date: Thu, 12 Feb 2015 04:28:35 +0300
From: Solar Designer <solar@...nwall.com>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] PHC status report

On Thu, Feb 12, 2015 at 02:54:41AM +0530, Donghoon Chang wrote:
> Also, based on my understanding, the current status of the PHC seems to be
> not in the final stage, but in the middle like Round 2 or Round 3 of SHA-3
> selection process. When we keep this in mind, I think that considering
> elegance or other additional feature seems to be too early.

No, PHC is in the final stage.  Per the "provisional timeline (subject
to change)", the next step is to select the winners.

https://password-hashing.net/timeline.html

The wording I quoted above does (theoretically) give us the flexibility
to do things differently, but at this point I wouldn't expect us to.
(As I mentioned, we did discuss introducing a "round 2" before the final
round, and decided against doing so.)

I think it's going to be tough to produce all the analysis and optimized
implementations to make a fully informed selection of winners in "2015 Q2",
as the timeline says.  We may aim for Q2, but realistically I would
expect a delay to Q3.

Alexander