Scrypt is a recent key derivation function designed for password storage. It aims to improve on earlier similar functions such as PBKDF2 and bcrypt by requiring significant amounts of memory in addition to computation time.
4
votes
2answers
77 views
Do SSD's offer significant performance boost for Scrypt?
Being a memory intensive hash, I was wondering if SSD's offer any appreciable performance boost for brute force attacks.
20
votes
8answers
1k views
Why improvising your own Hash function out of existing hash functions is so bad
I'm afraid I'll have tomatoes thrown at me for asking this old question, but here goes.
After reading that cooking up your own password hash out of existing hashing functions is dangerous over and ...
4
votes
3answers
301 views
How should I choose a difficulty factor for my password hashing function?
Assuming that I'm doing password hashing properly and using bcrypt, scrypt or PBKDF2, how should I go about choosing an appropriate difficulty factor? i.e rounds for bcrypt, iterations for PBKDF2 and ...
3
votes
3answers
1k views
Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
Given an option , which one should I choose , a HMAC for storing a password securely or a bcrypt or scrypt library?
1
vote
3answers
1k views
Is bcrypt better than scrypt [duplicate]
Possible Duplicate:
Do any security experts recommend bcrypt for password storage?
I'm no security expert and do not pretend to be that's why I'm asking here. I write many PHP based ...
20
votes
1answer
2k views
Are there more modern password hashing methods than bcrypt and scrypt?
This question made me start thinking about password hashing again. I currently use bcrypt (specifically py-bcrypt). I've heard a lot about PBKDF2, and scrypt.
What I'm wondering is if there are any ...
3
votes
2answers
187 views
User authentication + database encryption with same password
I'm working on a private project where I need to store a users financial data in a database. I'll encrypt this data using AES, and I'll be using scrypt to generate a AES ecnryption key from a more ...
0
votes
0answers
64 views
Recomended hash algorithm [duplicate]
Possible Duplicate:
How to securely hash passwords?
Do any security experts recommend bcrypt for password storage?
What would you choose between:
PBKDF2 SHA256 (270,000 iterations)
...
3
votes
5answers
254 views
What about combining pkdf2 with scrypt? [duplicate]
Possible Duplicate:
Would it make sense to use Bcrypt and PBKDF2 together?
How does the following password hashing scheme look to you?
iterations1 = scrypt iterations required to spend ...
1
vote
2answers
216 views
Scrypt + Bcrypt = cascade hashing
I've read here that hashing with differents algorithms would be a good idea.
Can you confirm that?
In your experience, is it useful and safe? Does it entail any security holes?
