3 ms·
PBKDF2 is okay, but the underlying algorithms (usually SHA256) are a little too easy to accelerate with GPUs and ASICs. scrypt can also be accelerated with GPUs
by kijin 11y ago
PBKDF2 is okay, but the underlying algorithms (usually SHA256) are a little too easy to accelerate with GPUs and ASICs. scrypt can also be accelerated with GPUs, but the difference is much smaller due to its design.
PBKDF2 is still widely used in applications that need to be small and simple, such as embedded devices and disk encryption tools. For hashing website passwords, though, it is showing its age.
Disclaimer: I'm not a cryptographer, so I might be talking out of my ass.
- zeveb 11y agoOh sure, scrypt is better than PBKDF2, but IMHO PBKDF2 is preferable to bcrypt, due to ease of implementation.
- kijin 11y agoThat depends on whether someone else has already implemented it for you. In PHP, for example, bcrypt is just `password_hash()`. To use PBKDF2, on the other hand, you have to generate your own salt and pass it to `hash_pbkdf2`.