In the question Do any security experts recommend bcrypt for password storage? Thomas Pornin recommends the hashing function scrypt but saying it is "too new to be recommended on a general basis".

Scrypt is from 2009 and I would like to know, if any problems have been found with this function, yet?

Also I would like to know if it's ready for production but I guess that would be opinion based and should only be a side note.

  • 1
    From this discussion it seems scrypt is demonstrably secure. A better question might be: is there a secure implementation out there?
    – RoraΖ
    Jan 9, 2015 at 15:14
  • 1
    There are some time-memory trade-offs that can be annoying (GPU pulls ahead of CPU) for low memory instantiations of scrypt. I'm not aware of anything that causes problems for scrypt using a lot of memory. Jan 9, 2015 at 16:11
  • 1
    Pornin also said in this very good answer that if it's been in existence for at least 5 years, it's good, which means you could actually start using it as early as 2014 :). So if you trust him (like I do), go for it.
    – dnang
    Jan 16, 2015 at 10:05

1 Answer 1


After 5 month without answer, only comments, I like to sum up:

  • From a discussion in sci.crypt it seems that scrypt is demonstrably secure.
  • Most people on SO trusts scrypt.
  • I have seen no one claimed to have a problem with the algorithm itself.

Regardless there might be issues with the implementation. A straight forward implementation of scrypt is potentially vulnerable to timing attacks but that should not be a problem.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .