[lm741]

This seems like a good time to remind everyone how easy it is to upgrade to scrypt.

Also, if you just wrap your current hashing scheme, you don't even have to bug your users to update their passwords. https://gist.github.com/cagerton/5485241

[pyre]

What does scrypt offer over bcrypt? The only difference I seem to recall is that scrypt is more memory-intensive (making it so that the CPU/GPU/whatever isn't the only bottleneck).

[tptacek]

scrypt is designed to be difficult on hardware. Both bcrypt and scrypt are currently difficult on GPU hardware, but it's unlikely to remain that way. Both are better than PBKDF2. scrypt is likely to be better longer. But really: throw a dart at any of the three of them.

[jplewicke]

It sounds like one of the Bitcoin alternatives is scrypt based, and they are putatively getting a roughly 10x speedup from GPUs: https://en.bitcoin.it/wiki/Litecoin#Scrypt_Proof_of_Work . Is that a new development, or is it in the neighborhood of how GPU-resistant it was supposed to be?

[JoachimSchipper]

The Litecoin guys just set the "make GPUs suck" (aka "memory use") parameter too low.

[jplewicke]

Thanks!