0
votes
0answers
21 views

Length-constant password comparison in scrypt? [duplicate]

E.g.: XORing the candidate against stored then comparing against 0. Do I need to worry? (my question is much in the same style as this question: Does bcrypt compare the hashes in ...
2
votes
1answer
262 views

ASIC/FPGA hardwares to compute Scrypt hashes [closed]

this company claim Scrypt mining by ASIC (on crypto currencies who use scrypt hashing as proof of work) scrypt is made to keep ASIC/FPGA attackers away, is that claim expired?
0
votes
2answers
169 views

scrypt strength with “weak” salt

I'm working on a project where following constrains apply: There's no remote database or any other means of storing extra data like random salt When user logins in, only username and password are ...
5
votes
2answers
579 views

Do SSD's offer significant performance boost for Scrypt?

Being a memory intensive hash, I was wondering if SSD's offer any appreciable performance boost for brute force attacks.
28
votes
8answers
2k views

Why improvising your own Hash function out of existing hash functions is so bad

I'm afraid I'll have tomatoes thrown at me for asking this old question, but here goes. After reading that cooking up your own password hash out of existing hashing functions is dangerous over and ...
11
votes
3answers
6k views

Is bcrypt better than scrypt [duplicate]

Possible Duplicate: Do any security experts recommend bcrypt for password storage? I'm no security expert and do not pretend to be that's why I'm asking here. I write many PHP based ...
4
votes
5answers
446 views

What about combining pkdf2 with scrypt? [duplicate]

Possible Duplicate: Would it make sense to use Bcrypt and PBKDF2 together? How does the following password hashing scheme look to you? iterations1 = scrypt iterations required to spend ...
1
vote
0answers
116 views

Recomended hash algorithm [duplicate]

Possible Duplicate: How to securely hash passwords? Do any security experts recommend bcrypt for password storage? What would you choose between: PBKDF2 SHA256 (270,000 iterations) ...
2
votes
2answers
344 views

Scrypt + Bcrypt = cascade hashing

I've read here that hashing with differents algorithms would be a good idea. Can you confirm that? In your experience, is it useful and safe? Does it entail any security holes?
6
votes
3answers
3k views

Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?

Given an option , which one should I choose , a HMAC for storing a password securely or a bcrypt or scrypt library?
5
votes
3answers
525 views

How should I choose a difficulty factor for my password hashing function?

Assuming that I'm doing password hashing properly and using bcrypt, scrypt or PBKDF2, how should I go about choosing an appropriate difficulty factor? i.e rounds for bcrypt, iterations for PBKDF2 and ...