Questions tagged [scrypt]

A slow and memory-intensive hash function designed for passwords

8 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
0answers
102 views

Is Argon2 “sequential memory hard”?

The Scrypt paper here defines memory-hard and sequential memory hard functions as follows: Definition 1. A memory-hard algorithm on a Random Access Machine is an algorithm which uses $S(n)$ space and ...
3
votes
0answers
112 views

Attacking Scrypt Under Access Pattern Leakage

Could cache-timing channels (such as exist for certain block ciphers) somehow be made use of in order to extract memory-access pattern information if both the attacker and user are NOT in a shared ...
1
vote
0answers
104 views

Scrypt with weak parameters, for proof of work?

I need a proof of work/memory that takes about 100ms to complete, and as short time as possible to validate. Hashing random values and a nounce to get enough leading zeroes is my current approach, and ...
1
vote
0answers
68 views

Security of simple Skein PBKDF mentioned in the paper

From the Skein 1.3 paper section 4.8, Skein as a Password-Based Key Derivation Function (PBKDF), it mentions the following as a simple PBKDF (S = seed and P = password): An even simpler PBKDF is to ...
1
vote
0answers
113 views

Looking for alternative key stretching

I am by no means a security expert, but I am curious whether functions that don't produce different outputs when raised to the power of N (without any psuedo-randomness) exist, that are as strong as "...
0
votes
0answers
41 views

How to estimate time / difficulty to brute force scrypt (or similar) hash at various short fixed lengh outputs?

My particular use case is a hash function that: Is slow / computationally expensive. It would take a pretty long time, or be infeasible to guess the input, if the hash output and the algorithm are ...
0
votes
0answers
37 views

How secure is file-based encryption in Android?

I want to estimate the cost of breaking file-based encryption in Android given a password entropy. The only information I found so far is this: The stretched credential is the user credential after ...
0
votes
1answer
44 views

How to use Botan to verify a web3 wallet/password?

The specification here seems quite clear, but unfortunately I'm still doing something wrong... I have this (single small c++ file) repository which very straightforwardly follows the password/wallet ...