Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(140)

Unified Diff: third_party/scrypt/README.chromium

Issue 11637016: Add "scrypt" to third_party for secure password hashes (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Added missing licences. Created 7 years, 12 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « third_party/scrypt/Makefile.in ('k') | third_party/scrypt/chromium.patch » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: third_party/scrypt/README.chromium
diff --git a/third_party/scrypt/README.chromium b/third_party/scrypt/README.chromium
new file mode 100644
index 0000000000000000000000000000000000000000..40f2346e08cf144cc526cea2d9695ac1cd1f50c5
--- /dev/null
+++ b/third_party/scrypt/README.chromium
@@ -0,0 +1,25 @@
+Short Name: scrypt
+Name: Secure Encryption
+Version: 1.1.6
+URL: http://www.tarsnap.com/scrypt.html
+Date: 2012-12-13
+License: 2-clause BSD license
+License File: LICENSE
+Security Critical: yes
+
+Description:
+The scrypt key derivation function was originally developed for use in
+the Tarsnap online backup system and is designed to be far more secure
+against hardware brute-force attacks than alternative functions such
+as PBKDF2 or bcrypt.
+
+We estimate that on modern (2009) hardware, if 5 seconds are spent
+computing a derived key, the cost of a hardware brute-force attack
+against scrypt is roughly 4000 times greater than the cost of a
+similar attack against bcrypt (to find the same password), and 20000
+times greater than a similar attack against PBKDF2.
+
+Local Modifications:
+chromium.patch
+- make it compile under Windows and accessible from C++
+- no functional changes
« no previous file with comments | « third_party/scrypt/Makefile.in ('k') | third_party/scrypt/chromium.patch » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698