Password Hashing Competition
The Password Hashing Competition was an open competition announced in 2013 to select one or more password hash functions that can be recognized as a recommended standard. It was modeled after the successful Advanced Encryption Standard process and NIST hash function competition, but directly organized by cryptographers and security practitioners. On 20 July 2015, Argon2 was selected as the final PHC winner, with special recognition given to four other password hashing schemes: Catena, Lyra2, yescrypt and Makwa.[1]
One goal of the Password Hashing Competition was to raise awareness of the need for strong password hash algorithms, hopefully avoiding a repeat of previous password breaches involving weak or no hashing, such as the ones involving RockYou (2009), JIRA, Gawker (2010), PlayStation Network outage, Battlefield Heroes (2011), eHarmony, LinkedIn, Adobe, ASUS, South Carolina Department of Revenue (2012), Evernote, Ubuntu Forums (2013), etc.[2][3][4][5][6]
The organizers were in contact with NIST, expecting an impact on its recommendations.[7]
See also
References
- ^ "Password Hashing Competition"
- ^ Danielle Walker. "Black Hat: Crackable algorithms prompt need for improved password hashing". 2013.
- ^ Antone Gonsalves. "Password hashing competition aims to beef up security" Archived 1 February 2014 at the Wayback Machine. 2013.
- ^ Antone Gonsalves. "Contest aims to boost state of password encryption" Archived 2 February 2014 at the Wayback Machine. 2013.
- ^ Antone Gonsalves. "Auckland Uni scientist judge in password contest". 2013.
- ^ Jean-Philippe Aumasson. "The Password Hashing Competition: Motivation, Challenges, and Organization". 2013.
- ^ Dennis Fisher. "Cryptographers aim to find new password hashing algorithm". 2013.
External links
- The Password Hashing Competition web site
- Source code and descriptions of the first round submissions
- PHC string format
| |||||||||||||||||||||||||||||
 | This cryptography-related article is a stub. You can help Wikipedia by adding missing information. |
Content Disclaimer
Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.
- The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
- There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
- It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
- Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
- Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.