3 ms·
I'm lazy and trust the local experts. What should be used instead of bcrypt?
by arpa 6y ago
I'm lazy and trust the local experts. What should be used instead of bcrypt?
- lnsru 6y agoIn couple years that will be also no big problem to crack with enough cheap FPGAs from today. Think about Kintex-7 boards for couple hundred dollars from AliExpress.
- indigo945 6y agoSCrypt is specifically designed to be hard to crack using FPGAs. To achieve this, it relies on high memory requirements for calculation of the hash. Crypto-mining boards for traditional cryptocurrencies have no memory requirements, and therefore cannot be repurposed to calculate SCrypt. However, with the advent of cryptocurrencies that also rely on memory-inefficient hash algorithms in order to prevent people from using classic FPGA clusters to mine them professionally, this is likely to change, as now there is monetary incentive to develop FPGA boards with high amounts of memory. The situation is still less bad though.
- contingencies 6y agoMemory is really cheap, so I wouldn't base any decision on the current public market for these devices. You can definitely get an FPGA board custom designed, debugged and delivered within two weeks in China.
- indeyets 6y agoArgon2 is the obvious contender
- throw0101a 6y agoAs others have mentioned, scrypt and Argone2. For general overview, see: * https://tools.ietf.org/html/draft-ietf-kitten-password-storage https://tools.ietf.org/html/draft-ietf-kitten-password-stora...