On 22 April 2012 06:33, Marsh Ray <[email protected]> wrote:
> On 04/22/2012 05:07 PM, Jeffrey Walton wrote:
>>
>>
>> Aren't programs generally written to be fast and take advantage of
>> things like locality of reference? I'd like to see a design that
>> complete violates the design principal. Iterations in a KDF would
>> then be icing on the cake.
>>
>> STRONGER KEY DERIVATION VIA SEQUENTIAL MEMORY-HARD FUNCTIONS,
>> www.bsdcan.org/2009/schedule/attachments/87_scrypt.pdf.
>
>
> Well, what about Scrypt doesn't meet your needs?
>
> Off the top of my head:
>
> * It doesn't have an RFC-type spec or reference implementation.

https://www.tarsnap.com/scrypt/scrypt-1.1.6.tgz ?

> * It probably doesn't parallelize on the defender's multi-core CPUs quite as
> well as it will on a botnet, but you specifically asked for a
> cache-thrashing function.




-- 
Eitan Adler
_______________________________________________
cryptography mailing list
[email protected]
http://lists.randombit.net/mailman/listinfo/cryptography

Reply via email to