Hacker News new | ask | show | jobs
by baby 3283 days ago
No good hash functions are usually fast. You're talking about "password hashing function", and I can understand the confusion. Maybe if people decided to rename these "pash" it would be easier.

Anyway the state of the art here is Argon2 which won the latest password hashing competition: https://password-hashing.net/
1 comments
vertex-four 3283 days ago
Your "password hashing functions" have another name already - KDFs, or key derivation functions.
link
baby 3283 days ago
I think we're circling back, KDFs are definitely not suited for hashing passwords. For example, you wouldn't use SHA-3(password) as a password hashing function, but it makes a fine KDF.

If you're thinking of PBKDF2, it's a "password-based" KDF as its name hints. While both password-based KDFs and password hashing functions seem to have common properties, I think the term "password hash" has caught up more (specifically thanks to the password hashing competition).

link