3 ms·
I am not sure how you are supposed to prove a negative. However I have often wondered why scrypt/bcrypt do not show up in any literature reviews. Search for scr
by dfc 14y ago
I am not sure how you are supposed to prove a negative. However I have often wondered why scrypt/bcrypt do not show up in any literature reviews. Search for scrypt/bcrypt:
https://eprint.iacr.org/search.html https://eprint.iacr.org/search.html
- trebor 14y agoI didn't have that link, and that pretty well backs your point. I know proving a negative is next to impossible, but I figured that you'd have a reason for making the assertion 9which I wanted to know). The closest I can find to a study of bcrypt/scrypt is: http://www.openwall.com/presentations/YaC2012-Password-Hashing-At-Scale/ http://www.openwall.com/presentations/YaC2012-Password-Hashi... http://www.openwall.com/presentations/ZeroNights2012-New-In-Password-Hashing/ http://www.openwall.com/presentations/ZeroNights2012-New-In-... Technically these are reviews/improvements to scrypt rather than an in-depth analysis of the security of the algorithm. Even the Security StackExchange site is kind of silent on the issue: http://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage http://security.stackexchange.com/questions/4781/do-any-secu...
- tptacek 14y agoCan you find cryptanalytic results on any passphrase-based KDF? PBKDF2 is a standard; find results on it from before say 2 years ago.