IETF Logo Mail Archive

Re: [Cfrg] scrypt password-based key derivation function

Hanno Böck <hanno@hboeck.de> Thu, 10 December 2015 18:27 UTC

Return-Path: <hanno@hboeck.de>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9FDA1AC3F2 for <cfrg@ietfa.amsl.com>; Thu, 10 Dec 2015 10:27:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.699
X-Spam-Level: **
X-Spam-Status: No, score=2.699 tagged_above=-999 required=5 tests=[BAYES_50=0.8, MANGLED_BACK=2.3, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fC5ebmqZELob for <cfrg@ietfa.amsl.com>; Thu, 10 Dec 2015 10:27:26 -0800 (PST)
Received: from zucker.schokokeks.org (zucker.schokokeks.org [178.63.68.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0EFE1AC3E3 for <cfrg@irtf.org>; Thu, 10 Dec 2015 10:27:25 -0800 (PST)
Received: from pc1 (0x3ec67ae7.inet.dsl.telianet.dk [::ffff:62.198.122.231]) (AUTH: LOGIN hanno-default@schokokeks.org, TLS: TLSv1/SSLv3, 128bits, ECDHE-RSA-AES128-GCM-SHA256) by zucker.schokokeks.org with ESMTPSA; Thu, 10 Dec 2015 19:27:21 +0100 id 000000000000006D.000000005669C409.0000221A
Date: Thu, 10 Dec 2015 19:27:37 +0100
From: Hanno Böck <hanno@hboeck.de>
To: cfrg@irtf.org
Message-ID: <20151210192737.08bf975f@pc1>
In-Reply-To: <56697BF7.6000400@cs.tcd.ie>
References: <87bogv4udy.fsf@latte.josefsson.org> <56697BF7.6000400@cs.tcd.ie>
X-Mailer: Claws Mail 3.13.0 (GTK+ 2.24.28; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=_zucker.schokokeks.org-8730-1449772041-0001-2"
Archived-At: <http://mailarchive.ietf.org/arch/msg/cfrg/J7XwScdnMNXY8q2HwlEJ3OnUgM4>
Subject: Re: [Cfrg] scrypt password-based key derivation function
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Dec 2015 18:27:28 -0000

Hi,

On Thu, 10 Dec 2015 13:19:51 +0000
Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:

> Just a heads-up that this is currently up for IESG approval
> on the January 7th telechat. If someone had a chance to take
> a peek in the meantime that'd be great as there were a few
> changes and clarifications done but hopefully nothing bad:-)

I see that this was originally submitted in 2012.

These days we have argon2 and from what I'm aware scrypt and argon2
have very similar goals. However argon2 is the winner of a
competition.

So is it really appropriate to still have an rfc for scrypt? It seems
that whereever scrypt is considered to be used argon2 can replace it.
And having more choices with almost the same goals only adds unneeded
complexity.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno@hboeck.de
GPG: BBB51E42

v2.14.0 | Report a Bug | By Email