2 ms·
This is what I use to justify my need. http://security.stackexchange.com/a/33684/9897 http://security.stackexchange.com/a/33684/9897 As I said in another post
by yeukhon 13y ago
This is what I use to justify my need.
http://security.stackexchange.com/a/33684/9897 http://security.stackexchange.com/a/33684/9897
As I said in another post, use adaptive hash function (bcrypt, scrypt or pbkdf2). And if you do it with limited computing power, my preference is to use PBKDF2 over bcrypt (scrypt is of course out of question).
- dspillett 13y agoDo you know where that table came from originally? I'd be interested to read a fuller report so if/when I resent those figures to anyone else I can answer any pertenant questions that come up.
- Huppie 13y agoThat table can be found in the paper "Stronger Key Derivation via Sequential Memory-Hard Functions"[0] by Colin Percival[1]. This is the paper that introduces explains and introduced scrypt. The costs are based on what was considered 'modern hardware' in 2009. [0]: https://www.tarsnap.com/scrypt/scrypt.pdf https://www.tarsnap.com/scrypt/scrypt.pdf [1]: https://news.ycombinator.com/user?id=cperciva https://news.ycombinator.com/user?id=cperciva