asfws 2103 - rump session - the password hashing competition, jean-philippe aumasson

20
The Password-Hashing Competition JP Aumasson — @veorq AppSec Forum Switzerland 2013

Upload: application-security-forum-western-switzerland

Post on 19-May-2015

623 views

Category:

Technology


0 download

DESCRIPTION

A presentation of the Password Hashing Competition, a new cryptography competition starting soon (https://password-hashing.net/)

TRANSCRIPT

Page 1: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson

The Password-Hashing Competition

JP Aumasson — @veorq AppSec Forum Switzerland 2013

Page 2: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 3: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 4: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 5: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 6: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 7: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 8: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 9: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 10: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 11: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 12: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 14: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson

return hash( password )

Page 15: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson

return hash( password, salt )

Page 16: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson

return hash( password, salt, cost )

Page 17: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson
Page 18: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson

call for submissions (Q1 2013)

receive submissions (Q1 2014)

analyze security/performance

finalists selection (Q3 2014)

winners selection (Q2 2015)

analyze security/performance

Page 19: ASFWS 2103 - Rump Session - The Password Hashing Competition, Jean-Philippe Aumasson