3 ms·
A very naive question by a non crypto expert: where is scrypt and bcrypt? is that because they are simply iterating another hash function or something? this is
by eranation 13y ago
A very naive question by a non crypto expert: where is scrypt and bcrypt? is that because they are simply iterating another hash function or something? this is why I don't see PBKDF?
- ColinWright 13y agoThis was asked in the previous discussion of this item. Here is the link to the question and discussion: https://news.ycombinator.com/item?id=6124825 https://news.ycombinator.com/item?id=6124825 If you want to see more of the discussion, follow the "parent" links from there.
- cschmidt 13y agoThey are different things. I think the proper term for scrypt, bcrypt, etc. is a key derivation function. They take a password, add a salt, and produce a key that can be used for authentication. http://en.wikipedia.org/wiki/Key_derivation_function http://en.wikipedia.org/wiki/Key_derivation_function The hash functions in the OP are cryptographic hash functions. http://en.wikipedia.org/wiki/Cryptographic_hash_function http://en.wikipedia.org/wiki/Cryptographic_hash_function The 'cryptographic' part of the name means that it is hard to find two files that produce a collision (hash to the same value). I believe that key derivation functions will include cryptographic hash functions.
- cperciva 13y agoShort answer: Those are key derivation functions, and people who call them "hash functions" are abusing terminology in a dangerous way.