OLD | NEW |
1 Short Name: scrypt | 1 Short Name: scrypt |
2 Name: Secure Encryption | 2 Name: Secure Encryption |
3 Version: 1.1.6 | 3 Version: 1.1.6 |
4 URL: http://www.tarsnap.com/scrypt.html | 4 URL: http://www.tarsnap.com/scrypt.html |
5 Date: 2012-12-13 | 5 Date: 2012-12-13 |
6 License: 2-clause BSD license | 6 License: BSD 2-Clause License |
7 License File: LICENSE | 7 License File: LICENSE |
8 Security Critical: yes | 8 Security Critical: yes |
9 | 9 |
10 Description: | 10 Description: |
11 The scrypt key derivation function was originally developed for use in | 11 The scrypt key derivation function was originally developed for use in |
12 the Tarsnap online backup system and is designed to be far more secure | 12 the Tarsnap online backup system and is designed to be far more secure |
13 against hardware brute-force attacks than alternative functions such | 13 against hardware brute-force attacks than alternative functions such |
14 as PBKDF2 or bcrypt. | 14 as PBKDF2 or bcrypt. |
15 | 15 |
16 We estimate that on modern (2009) hardware, if 5 seconds are spent | 16 We estimate that on modern (2009) hardware, if 5 seconds are spent |
17 computing a derived key, the cost of a hardware brute-force attack | 17 computing a derived key, the cost of a hardware brute-force attack |
18 against scrypt is roughly 4000 times greater than the cost of a | 18 against scrypt is roughly 4000 times greater than the cost of a |
19 similar attack against bcrypt (to find the same password), and 20000 | 19 similar attack against bcrypt (to find the same password), and 20000 |
20 times greater than a similar attack against PBKDF2. | 20 times greater than a similar attack against PBKDF2. |
21 | 21 |
22 Local Modifications: | 22 Local Modifications: |
23 chromium.patch | 23 chromium.patch |
24 - make it compile under Windows and accessible from C++ | 24 - make it compile under Windows and accessible from C++ |
25 - no functional changes | 25 - no functional changes |
OLD | NEW |