4 ms·
> PBKDF2-SHA1 What's the problem?
by staticassertion 6y ago
> PBKDF2-SHA1
What's the problem?
- notfed 6y agoSee https://en.wikipedia.org/wiki/PBKDF2#Alternatives_to_PBKDF2 https://en.wikipedia.org/wiki/PBKDF2#Alternatives_to_PBKDF2
- simcop2387 6y agoNo memory hardness and no data dependence. Along with that SHA1 is really simple to implement on ASICs, FPGA, GPUs and such. This means that you can do lots of tests in parallel trivially (not much ram needed for each test, and no branching). You can use lots of PBKDF2 rounds to help against this but it will always mean that the cost of attacking it will scale much lower than something like scrypt or the argon2 family. In this application I don't believe there's any specific attacks against SHA1 or PBKDF2 but they don't provide the additional security that more modern things provide.
- staticassertion 6y agoFair enough. I use a ton of rounds, but yeah that's fair.