4 ms·

bscrypt is a modern alternative to bcrypt; also cache-hard and more suitable than Argon2 and Scrypt: cache-hard, easier to deploy on multi-user environments, as

bscrypt is a modern alternative to bcrypt; also cache-hard and more suitable than Argon2 and Scrypt: cache-hard, easier to deploy on multi-user environments, as well as web browsers/mobile devices. https://github.com/Sc00bz/bscrypt https://github.com/Sc00bz/bscrypt

indeyets 3y ago
Is it verified, peer-reviewed? I can't find much about it
- tptacek 3y ago
  I don't have anything super productive to say here and this comment is more emotive than substantive but I'm going to say it anyways: it is remarkable to me how much peer review people demand from password hash constructions (which are quite unlikely to fail dramatically) than from every other cryptographic primitive they use.
  - Vecr 3y ago
    Well, I don't know about that. I really want all algorithms and implementations checked out by at least a few people that write up a report. Even something like Blake3 could be a bit iffy under that criteria.
    - tptacek 3y ago
      Blake3 is not, in fact, a bit iffy.
      - Vecr 3y ago
        Sure, but the tree structure is "made up" and has had less scrutiny than something than SHA2 SHA384 for example. I use it, but that's where my border line is.
deleted 3y ago
[deleted]
borplk 3y ago
The addition of 's' has made it an unfortunate name! "bs crypto" :))