• Home
  • Search
  • Cryptanalytic time–memory trade-off for password hashing schemes
  • Cite Icon7
  • https://doi.org/10.1007/s10207-018-0405-5Copy DOI Icon

Cryptanalytic time–memory trade-off for password hashing schemes

Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Increasing threat of password leakage from compromised password hashes demands a resource consuming password-hashing algorithm to prevent the precomputation of the password hashes. A class of password-hashing schemes (PHS) provides such a defense by making the design Memory hard. This ensures that any reduction in the memory consumed by the algorithm leads to an exponential increase in its runtime. The security offered by a memory-hard PHS design is measured in terms of its time–memory trade-off (TMTO) defense. Another important measure for a good PHS is its efficiency in utilizing all the available memory as quickly as possible, and fast running time when more than the required memory is available. In this work, we present a simple technique to analyze TMTO for a password-hashing scheme which can be represented as a directed acyclic graph (DAG). The nodes of the DAG correspond to the storage required by the algorithm and the edges correspond to the flow of the execution. Our proposed technique provides expected runtimes at varied levels of available storage utilizing the DAG representation of the algorithm. We show the effectiveness of our proposed technique by applying it on three designs from the “Password Hashing Competition" (PHC)—Argon2-Version 1.2.1 (the PHC winner), Catena-Version 3.2 and Rig-Version 2. Our analysis shows that Argon2i is not providing expected memory hardness which is also highlighted in a recent work by Corrigan-Gibbs et al. We analyze these PHS for performance under various settings of time and memory complexities. Our experimental results show (i) simple DAGs for PHS are efficient but not memory hard, (ii) complex DAGs for PHS are memory hard but less efficient, and (iii) combination of two simple graphs in the representation of a DAG for PHS achieves both memory hardness and efficiency.

Similar Papers
  • Conference Article
  • Citations1

Self-Stabilizing Construction of a Minimal Weakly ST-Reachable Directed Acyclic Graph

  • Sep 01, 2020
  • Junya Nakamura +3
  • Research Article
  • Citations15

Real-Time Scheduling of DAG Tasks with Arbitrary Deadlines

  • Oct 14, 2019
  • ACM Transactions on Design Automation of Electronic Systems
  • Kankan Wang +5
  • Research Article
  • Citations3

Measuring financial contagion: a directed acyclic graphs and error correction model

  • Jan 01, 2013
  • International Journal of Business Innovation and Research
  • Selma Jayech +1
  • Conference Article
  • Citations12

Kernels for Feedback Arc Set In Tournaments

  • Nov 16, 2009
  • DROPS (Schloss Dagstuhl – Leibniz Center for Informatics)
  • Stéphane Bessy +6
  • Book Chapter
  • Citations2

On the Computation of Recursion in Relational Databases

  • Jan 01, 2003
  • Yangjun Chen
  • Research Article
  • Citations22

Approximating the longest path length of a stochastic DAG by a normal distribution in linear time

  • Jan 21, 2009
  • Journal of Discrete Algorithms
  • Ei Ando +2
  • Book Chapter
  • Citations21

Sparsifying, Shrinking and Splicing for Minimum Path Cover in Parameterized Linear Time

  • Jan 01, 2022
  • Manuel Cáceres +4
  • Research Article

Monte-Carlo Regret Minimization for Adversarial Team Games

  • Sep 19, 2024
  • Intelligenza Artificiale: The international journal of the AIxIA
  • Luca Carminati +1
  • Single Report
  • Citations2

DAGSENS: Directed Acyclic Graph Based Direct and Adjoint Transient Sensitivity Analysis for Event-Driven Objective Functions

  • Aug 01, 2017
  • Karthik Aadithya +2
  • Research Article
  • Citations9

BDD-Constrained Search: A Unified Approach to Constrained Shortest Path Problems

  • Feb 16, 2015
  • Proceedings of the AAAI Conference on Artificial Intelligence
  • Masaaki Nishino +3
  • Book Chapter
  • Citations20

When Recursion is Better than Iteration: A Linear-Time Algorithm for Acyclicity with Few Error Vertices

  • Jan 01, 2018
  • Daniel Lokshtanov +2
  • Research Article

Cumulative Memory Lower Bounds for Randomized and Quantum Computation

  • Apr 23, 2025
  • ACM Transactions on Computation Theory
  • Paul Beame +1
  • Book Chapter
  • Citations3

On the Maximum Connectivity Improvement Problem

  • Jan 01, 2019
  • Federico Corò +2
  • Conference Article
  • Citations4

Lifetime-Aware Clustering and DAG-Based Routing in WSNs

  • Nov 13, 2016
  • Chuanyao Nie +1
  • Research Article
  • Citations10

Review of Task Duplication Based (TDB) Scheduling Algorithms

  • Feb 28, 2015
  • The Smart Computing Review
  • Shobhit Gupta
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.