I've been reading up on Argon2 (and, to a lesser extent, other recent password hashers). I'm trying to understand why it won the competition versus the other finalists, like Catena, Lyra2, Makwa or Yescrypt.
Unfortunately, I don't see much technical discussion on the competition's website. It does link to the mailing list archives, but I can't find the actual mailing list there (although I haven't tried the NNTP option, since I don't have an NNTP client) due to some broken links. I'm unclear if that's a temporary problem, or a permanent one.
I have two closely-related questions, either of which I would be grateful for insight on:
- I've been proceeding under the belief that PHC is a well-regarded and competently run competition that is considered to have advanced the state of the art in password hashing. Was there any notable controversy surrounding it, e.g. serious concerns with the panel, submission or winner selection processes?
- What were the key factors that led to Argon2 being declared the winner by the PHC panel, compared to the other finalists?