A slow and memory-intensive hash function designed for passwords
2
votes
2answers
124 views
How to derive two keys from one password
What is the best way to generate two independent symmetric keys from one user-entered password or passphrase?
Would using both scrypt and pbkdf2 achieve this?
3
votes
2answers
125 views
what is the difference between Scrypt and PBKDF2
After reading these two resources I am wondering am I getting all the differences between Scrypt and PBKDF2 or am I missing something?
As far as I understood, the similarity is:
both are using ...
3
votes
0answers
82 views
How can scrypt be improved to counter GPU mining
I know scrypt was designed to lessen the GPU/ASIC advantage.
We now have litecoin as a real-world example of this. However, it hasn't worked out perfectly. Most coins are mined by GPUs, although the ...
3
votes
1answer
78 views
Key collision in scrypt and hkdf
I am developing a mostly-offline authorization system that authorizes a user using an deterministically generated AuthKey derived from a MasterKey derived from a high-entropy chunk of data (128 bits) ...
0
votes
1answer
63 views
GPG vs PGP vs OpenSSH and management of them
What is the main difference of the three?
Can I use only one of them for everything (e.g. GPG for SSH authentication)
If I encrypt my private key with a pass-phrase, is it strong enough so that if ...
0
votes
1answer
93 views
Scrypt as a KDF with one-time high-entropy input
I'm looking at using Scrypt as a KDF. Assume the following:
the input will always be high-entropy random bytes generated by a CSPRNG
the length of the input can vary from between 8 to 32 bytes
the ...
0
votes
2answers
155 views
AES key expansion vs. a hash
Is there something special about the AES key expansion algorithm that makes it secure, or it is a compromise between security and speed? For example, say with a key I expand it by taking pbkdf2(key) ...
7
votes
1answer
253 views
Is there any known malleability of scrypt outputs?
The scenario is single-use passphrase-based non-interactive message authentication.
The obvious try to do this is to chose a random salt of the appropriate length and send:
...
10
votes
3answers
821 views
How well does scrypt perform on different architectures / OSes?
The scrypt algorithm seems to be a prominent feature in the "CPU friendly" Bitcoin clones for the proof-of-labor part. I've heard claims that it's relatively slow on Windows and/or Intel compared to ...
