3 ms·

Worth highlighting from the article insofar as this will actually get a lot of real-world use: > yescrypt is the default password hashing scheme on recent ALT

• adrian_b 5y ago
  While for other applications it may be debated which is the best hash function, for replacing the Drepper hash functions (a.k.a. $5$ and $6$) which are used by most Linux and FreeBSD computers, there is no doubt that the sooner yescrypt (i.e. $y$) replaces those, the better. The Drepper hash functions were already obsolete in 2007 at introduction, because they were worse for all criteria than the existing older hash functions (e.g. bcrypt from 1999 or PBKDF2 from 2000). Replacing them with yescrypt (e.g. when libxcrypt is used instead of the older glibc functions), hardens the systems with minimal effort. Yescrypt includes the standard PBKDF2 function, so there can be no argument that it might be less adequate for security certifications than the ad-hoc Drepper hash functions. Other hash functions might be in fact better, but they are newer and they are not standardized yet, even if e.g. RFC drafts may exist, so organizations that want to follow standards may be reluctant to adopt them.