| Index: third_party/scrypt/README.chromium
|
| diff --git a/third_party/scrypt/README.chromium b/third_party/scrypt/README.chromium
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..40f2346e08cf144cc526cea2d9695ac1cd1f50c5
|
| --- /dev/null
|
| +++ b/third_party/scrypt/README.chromium
|
| @@ -0,0 +1,25 @@
|
| +Short Name: scrypt
|
| +Name: Secure Encryption
|
| +Version: 1.1.6
|
| +URL: http://www.tarsnap.com/scrypt.html
|
| +Date: 2012-12-13
|
| +License: 2-clause BSD license
|
| +License File: LICENSE
|
| +Security Critical: yes
|
| +
|
| +Description:
|
| +The scrypt key derivation function was originally developed for use in
|
| +the Tarsnap online backup system and is designed to be far more secure
|
| +against hardware brute-force attacks than alternative functions such
|
| +as PBKDF2 or bcrypt.
|
| +
|
| +We estimate that on modern (2009) hardware, if 5 seconds are spent
|
| +computing a derived key, the cost of a hardware brute-force attack
|
| +against scrypt is roughly 4000 times greater than the cost of a
|
| +similar attack against bcrypt (to find the same password), and 20000
|
| +times greater than a similar attack against PBKDF2.
|
| +
|
| +Local Modifications:
|
| +chromium.patch
|
| +- make it compile under Windows and accessible from C++
|
| +- no functional changes
|
|
|