lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 21 Jul 2015 14:21:25 -0700
From: Bill Cox <>
To: "" <>
Subject: Re: [PHC] Argon2 improvement thread

On Tue, Jul 21, 2015 at 1:32 PM, Gregory Maxwell <> wrote:

> On Tue, Jul 21, 2015 at 7:45 PM, Solar Designer <>
> wrote:
> > On Tue, Jul 21, 2015 at 12:24:00PM -0700, Bill Cox wrote:
> >> If Alexander proposed to integrate his PWXFORM (I don't know what
> >> is), then I would be for it.  This would satisfy my request for improved
> >> GPU resistance, and also my request for multiplication-chain computation
> >> time hardening.
> >
> > MAXFORM is the scalar equivalent to (and subset of) pwxform.  It's
> > neither parallel, nor wide, but is otherwise the same.
> >
> > It would co-exist with Argon2's existing SIMD code.
> Just to be clear--
> By existing SIMD code you mean the compression function that includes
> the BlaMka permutation from Lyra2?
> E.g. You'd run the MAXFORM in parallel using the otherwise untilized
> scalar multipliers concurrently with the existing (modified blake2
> based) SIMD?
> I consider it a virtue to leave no computational resource available to
> the defender idle...

Yes, that's what he means.  It might make sense to back off to the previous
reduced-Blake2 if the multiplication chains are already done in the scalar

I agree it's better to use more of the defender's resources.


Content of type "text/html" skipped

Powered by blists - more mailing lists