Re: [Cfrg] [MASSMAIL]Re: adopting Argon2 as a CFRG document

Indeed, the PHC competition has significantly contributed to the design and analysis of password-hashing schemes. It's a nice mixture of crypto and engineering. So it would be desirable to wait until we understand the limits of attacks and corresponding countermeasures. 
The article on baloon hashing is a significant step forward for understanding these issues.

Regards,
Grigory Marshalko,
expert,
Technical committee for standardisation "Cryptography and security mechanisms" (ТC 26)
www.tc26.ru
22 января 2016 г., 22:31, "Paterson, Kenny" <Kenny.Paterson@rhul.ac.uk> написал:
> Mike,
> 
> Thanks. The authors of the Argon2 design may in due course tweak their
> design to avoid the identified problems, or argue that they are not
> sufficiently worrisome to warrant a change to the design.
> 
> We definitely need to factor this in to our deliberations, and we will
> take the time to do so. Let's see how it plays out...
> 
> Regards
> 
> Kenny
> 
> On 22/01/2016 19:20, "Mike Hamburg" <mike@shiftleft.org> wrote:
> 
>> We might want to hold off on Argon2 — at least on finalizing it — until
>> the team has
>> responded to (and hopefully mitigated) the issues mentioned at
>> https://eprint.iacr.org/2016/027. Essentially the problem is that Argon2
>> can be computed
>> in less space than advertised. The team said that they are planning a
>> response, cf
>> http://permalink.gmane.org/gmane.comp.security.phc/3606
>> 
>> Cheers,
>> — Mike
>> 
>> On Jan 22, 2016, at 11:10 AM, Paterson, Kenny <Kenny.Paterson@rhul.ac.uk>
>> wrote:
>> 
>> Dear CFRG,
>> 
>> Having received limited feedback either way from the group (specifically,
>> one voice in favour), the CFRG chairs have decided to adopt
>> https://tools.ietf.org/html/draft-josefsson-argon2-00 as a CFRG document.
>> 
>> If you have objections or concerns, please reply to this email or directly
>> to CFRG chairs.
>> 
>> Sincerely,
>> 
>> Kenny Paterson (for the chairs)
>> 
>> On 06/11/2015 11:47, "Paterson, Kenny" <Kenny.Paterson@rhul.ac.uk> wrote:
>> 
>> Hi Stephen,
>> 
>> Yes, the chairs are amenable to this. We've been keeping an eye on the
>> password hashing competition and were planning a work item in this area.
>> 
>> Any comments from the group, either supporting or objecting to us adopting
>> this draft in the RG?
>> 
>> Cheers,
>> 
>> Kenny
>> 
>> (for the chairs)
>> 
>> On 06/11/2015 02:18, "Cfrg on behalf of Stephen Farrell"
>> <cfrg-bounces@irtf.org on behalf of
>> stephen.farrell@cs.tcd.ie> wrote:
>> 
>> The password hashing competition has a winner and some folks
>> in the openpgp wg are interested in using that winner. I guess
>> this might be better processed via cfrg if folks are amenable
>> to that.
>> 
>> Thanks,
>> S.
>> 
>> _______________________________________________
>> Cfrg mailing list
>> Cfrg@irtf.org
>> https://www.irtf.org/mailman/listinfo/cfrg
> 
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg