4 ms·
This seems like a good time to remind everyone how easy it is to upgrade to scrypt. Also, if you just wrap your current hashing scheme, you don't even have to
by lm741 13y ago
This seems like a good time to remind everyone how easy it is to upgrade to scrypt.
Also, if you just wrap your current hashing scheme, you don't even have to bug your users to update their passwords. https://gist.github.com/cagerton/5485241 https://gist.github.com/cagerton/5485241
- pyre 13y agoWhat does scrypt offer over bcrypt? The only difference I seem to recall is that scrypt is more memory-intensive (making it so that the CPU/GPU/whatever isn't the only bottleneck).
- tptacek 13y agoscrypt is designed to be difficult on hardware. Both bcrypt and scrypt are currently difficult on GPU hardware, but it's unlikely to remain that way. Both are better than PBKDF2. scrypt is likely to be better longer. But really: throw a dart at any of the three of them.
- jplewicke 13y agoIt sounds like one of the Bitcoin alternatives is scrypt based, and they are putatively getting a roughly 10x speedup from GPUs: https://en.bitcoin.it/wiki/Litecoin#Scrypt_Proof_of_Work https://en.bitcoin.it/wiki/Litecoin#Scrypt_Proof_of_Work . Is that a new development, or is it in the neighborhood of how GPU-resistant it was supposed to be?
- JoachimSchipper 13y agoThe Litecoin guys just set the "make GPUs suck" (aka "memory use") parameter too low.
- jplewicke 13y agoThanks!