News for hackers. Stuff that matters.

A comment on PSA: Upgrade your LUKS key derivation function.

Re:PSA: Upgrade your LUKS key derivation function by IAmLiterallyAB on Tuesday April 18, 2023 @07:57AM (#35612788)
According to one of the experts on the panel of the Password Hashing Competition, Argon2 is actually weaker than bcrypt https://twitter.com/TerahashCorp/status/1155129705034653698

I'm not an expert, but I'm really curious to hear more. It's especially weird given I've heard nothing but good things about Argon2 otherwise.

[ Parent | on HN ]
Re:PSA: Upgrade your LUKS key derivation function by stevelacy on Tuesday April 18, 2023 @10:22AM (#35614413)
Farther comments in that thread indicate they are referring to PHF (password hashing function) not KDF (key derivation function). LUKS uses a KDF.
[ Parent | on HN ]
Re:PSA: Upgrade your LUKS key derivation function by upofadown on Tuesday April 18, 2023 @03:08PM (#35618534)
The issue as I understand it, is that if you want to limit the amount of time that the user has to wait to a second or less (a reasonable assumption) then you can't use all that much memory with Argon2. So you don't get a lot of memory hardness.
[ Parent | on HN ]