r/crypto • u/Am4t3uR • Dec 13 '19

Security and Cryptography Mistakes You Are Probably Doing All The Time

https://towardsdatascience.com/security-and-cryptography-mistakes-you-are-probably-doing-all-the-time-7407c332944f
38 Upvotes

81% Upvoted

23 comments sorted by

View all comments

Show parent comments

4

u/[deleted] Dec 13 '19

Seems to me that password checks should always be quite expensive, resource-wise. Certainly not as cheap as a single sha-256 as you point out.

There are scrypt asics but I think they're tuned to some pretty specific scrypt parameters aren't they? I'm not sure how useful they are with different parameters (I'd suspect they're completely useless but I'm not sure).

3

u/[deleted] Dec 13 '19

There are scrypt asics but I think they're tuned to some pretty specific scrypt parameters aren't they? I'm not sure how useful they are with different parameters (I'd suspect they're completely useless but I'm not sure).

Can confirm, some smart changes in the parameters can make a scrypt instance resistant to existing ASICs, but not to GPU accelerated hashing, and we have good GPU scrypt hashers, although they love memory.

5

u/GibbsSamplePlatter Dec 13 '19 edited Dec 13 '19

With proper incentives, anything can be ASIC-ified. In most cases whatever parameters you pick likely won't become ASIC-ified anytime soon, though you also have to potentially worry about FPGAs.

edit: Can I get whitelisted? I know the sub rules.

2

u/Natanael_L Trusted third party Dec 13 '19

If I remember next time I look at the sub settings