Am 03.07.2015 um 22:45 schrieb Jeffrey Walton: > > I think the mentioned "memory-hard KDF" is misleading. Scrypt is a > PBKDF. > > > I thought Percival described a class of problem and Scrypt was in the > class (https://www.tarsnap.com/scrypt/scrypt.pdf). Is that no longer > the case? Yes, in the paper he constructed "sequential memory hard functions" (IIRC) and proved that scrypt is such a function. So, by definition, it is indeed a memory-hard KDF.
However, the main use-case / purpose of scrypt is password based key derivation or password hashing, so I categorized it as PBKDF, so it gets in-line with the password hashing schemes of PHC and falls into the same category as bcrypt and PBKDF2. I think, if we continue to disagree on the naming of the classes, we should delay this until the point where the results of PHC are announced and we actually start to discuss on the design. > > Or did committees (like IETF and P1363) water it down so it no longer > applied? (Committees do some unexpected things at times). I doubt there's even some sort of standardized scrypt (though there's an RFC draft <https://datatracker.ietf.org/doc/draft-josefsson-scrypt-kdf/>), so no, they changed nothing. BR JPM > > Jeff > -- > -- > You received this message because you are subscribed to the "Crypto++ > Users" Google Group. > To unsubscribe, send an email to > [email protected]. > More information about Crypto++ and this group is available at > http://www.cryptopp.com. > --- > You received this message because you are subscribed to the Google > Groups "Crypto++ Users" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout. -- -- You received this message because you are subscribed to the "Crypto++ Users" Google Group. To unsubscribe, send an email to [email protected]. More information about Crypto++ and this group is available at http://www.cryptopp.com. --- You received this message because you are subscribed to the Google Groups "Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
smime.p7s
Description: S/MIME Cryptographic Signature
