The scrypt function is specifically designed to hinder such attempts by raising the resource demands of the algorithm. Specifically, the algorithm is designed to use a large amount of memory compared to other password-based KDFs, making the size and the cost of a hardware implementation much m...
and Bcrypt uses the same approach? because am lost between the three, Bcrypt is better than PBKDF2 because of using custom memory? then Bcrypt and Scrypt differs only in the amount of memory used? (excluding pbkdf2 that dont use this approach)
according to en.wikipedia.org/wiki/PBKDF2#Alternatives_to_PBKDF2 , scrypt would be better than bcrypt, that would be better than pbkdf2. But scrypt isn't widely used, so it might have some weakness not yet discovered...
so from this: SHA-256, for instance, can be very efficiently implemented on a GPU... i understand that Bcrypt is slow because it uses Blowfish? so Scrypt is better because of Salsa?
just found this: The reason bcrypt is the best answer is that it uses over 4 KiB for it's internal state which means that GPUs will be less useful. why, 4kib is less for GPU no?
Discussion between woliveirajr and Ab…
Discussion between woliveirajr and Ab…