← Back to the reading view
Slides · 7 slides
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2
The same module told visually, ready to present. Speaker notes carry the full explanation.
Foundations
Password hashing & key derivation
A hash is too fast for passwords. KDFs slow things down on purpose
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today1 / 7
The wrong tool
Why SHA-256 alone fails for passwords
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today2 / 7
Salting
Salt: identical passwords, different hashes
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today3 / 7
Worked example
What 100,000 iterations cost the attacker
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today4 / 7
The family
Four password hashes, increasingly GPU-resistant
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today5 / 7
2015 · Password Hashing Competition
Argon2: three independent knobs
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today6 / 7
Different job
Password hashing versus HKDF
Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2 · Classical Crypto Today7 / 7
1 / 7
Keys: ← → move, F full screen, G all slides, N notes