phc-discussions - Re: [PHC] Argon2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 5 May 2015 21:53:17 +0200 (CEST)
From: Stefan.Lucks@...-weimar.de
To: discussions@...sword-hashing.net
Subject: Re: [PHC] Argon2

On Tue, 5 May 2015, Solar Designer wrote:

> Does this mean you'd like us not to accept even the Argon2 tweaks that
> the Argon team has just promised will be ready by the end of this month?

If the panel accepts the Argon2 tweaks, it should give the other finalists 
a decent amount of time to propose tweaks as well. Everything else would 
be extremely unfair.

I wouldn't mind that. But the consequence is clear: This would delay the 
process by a couple of months. Just waiting to the end of this mongth 
won't do.

> Does use of BlaMka in Argon2i count as an optimization rather than a tweak?

That sounds like an optimisation to me.

BTW, Catena has very specifically been defined as a framework. You are 
invited to plug in the hash function you like -- including SHA-512, 
BlaMka, and whatever. (The default instantiation is based on Blake2b, but 
that is just one of many allowed instantiations.)

> What about a change in block indexing during memory filling?

This is something I would consider a tweak, not an optimization any more.

So long

Stefan

------  I  love  the  taste  of  Cryptanalysis  in  the morning!  ------
uni-weimar.de/de/medien/professuren/mediensicherheit/people/stefan-lucks
--Stefan.Lucks (at) uni-weimar.de, Bauhaus-Universität Weimar, Germany--