4 ms·
Can you cite anything that shows that bcrypt hasn't been studied by cryptographers? I've not heard that yet and would like to add it to my research (I keep note
by trebor 14y ago
Can you cite anything that shows that bcrypt hasn't been studied by cryptographers? I've not heard that yet and would like to add it to my research (I keep notes on good password storage techniques).
- dfc 14y agoI am not sure how you are supposed to prove a negative. However I have often wondered why scrypt/bcrypt do not show up in any literature reviews. Search for scrypt/bcrypt: https://eprint.iacr.org/search.html https://eprint.iacr.org/search.html
- trebor 14y agoI didn't have that link, and that pretty well backs your point. I know proving a negative is next to impossible, but I figured that you'd have a reason for making the assertion 9which I wanted to know). The closest I can find to a study of bcrypt/scrypt is: http://www.openwall.com/presentations/YaC2012-Password-Hashing-At-Scale/ http://www.openwall.com/presentations/YaC2012-Password-Hashi... http://www.openwall.com/presentations/ZeroNights2012-New-In-Password-Hashing/ http://www.openwall.com/presentations/ZeroNights2012-New-In-... Technically these are reviews/improvements to scrypt rather than an in-depth analysis of the security of the algorithm. Even the Security StackExchange site is kind of silent on the issue: http://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage http://security.stackexchange.com/questions/4781/do-any-secu...
- tptacek 14y agoCan you find cryptanalytic results on any passphrase-based KDF? PBKDF2 is a standard; find results on it from before say 2 years ago.