Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

The Bitcoin alternative, Litecoin uses a different algorithm to protect the block chain, namely Scrypt (not Sha256).

Given that GPU accelerators exists, and ASICS are due to be released, does the widespread implementation of the Litecoin network affect the implied security of my hashed password database?

  • Does the mere existence of consumer grade Scrypt ASICs with the ability to brute force a defined difficulty affect the implied security of hashed passwords?

The mitigation I'm hoping to hear is that the Litecoin protocol (and all clones) use crypto in a different way that makes it infeasible to use in distributed password cracking.

share|improve this question
    
It is definitely playing a role in pushing the hashing technology forward. I don't think you will see the same gains from scrypt ASIC's as you did with sha256. This is an excellent question though, and I look forward to some answers from those who are more knowledgeable on the subject. –  David Houde Mar 10 at 3:36

1 Answer 1

up vote 11 down vote accepted

No.

Litecoin uses an algorithm called scrypt which has variables that determine the amount of CPU/RAM required to compute hash. Litecoin's scrypt parameters are fixed at N = 1024; p = 1; r = 1. (http://cryptocur.com/litecoin/)

Users of Scypt for password hashing purposes should have the parameters set much, much higher which will put password cracking out of range of Scrypt ASICs designed for Litecoin mining. After all, this is the key behind Scrypt's design, having a tunable hashing cost.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.