Colin Percival personal blog

Bcrypt is now obsolete

daemonology.net 1 min read

I am speaking today at BSDCan'09 about my work on the scrypt key derivation function. In the context of hardware brute-force attacks, scrypt is thousands of times more secure than existing "best practice" solutions such as bcrypt and PBKDF2; in fact, under reasonable assumptions it is provably as strong as possible…

Points

73

HN comments

43

Submissions

1

Cited by

0 commenters

Security & PrivacyCrypto & Blockchain2009

Related posts from the same era

Firesheep: Easy HTTP session hijacking from within Firefox

Eric Butler2010714 points341 commentscited by 10 details

Automatically followed by abusive ex-husband (and his friends) on Google Buzz

Fugitivus2010549 points275 comments details

A new type of phishing attack. Works on savvy users.

Aza Raskin2010491 points209 commentscited by 4 details

Re-entry to US without backscatter or pat-down

NNO BLASTERS!2010459 points179 comments details

Told to remove blog posts describing patented algorithm

sites.google.com/site/redcodenl2010429 points147 comments details

A Big Case of Oops

HHP Blogs2010395 points99 comments details