yescrypt

yescrypt is a cryptographic key derivation function used for password hashing on Fedora Linux,^[1] Debian,^[2] Ubuntu,^[3] and Arch Linux.^[4] The function is more resistant to offline password-cracking attacks than SHA-512.^[5] It is based on scrypt.^[5]

It was designed by Alexander Peslyak, also known as Solar Designer, to be highly resistant to hardware-accelerated brute-force attacks. It features enhanced memory-hardness and "strongly sequential" processing, which reduces the threat of large-scale cracking attempts using GPUs, FPGAs, and ASICs. Attacks that rely on parallelization are made more resource-intensive by yescrypt requiring a substantial amount of RAM to compute a single hash. These security benefits and its scalability have led to its adoption as the default password-hashing scheme for several major Linux distributions, where it is identifiable in the /etc/shadow file by the $y$ prefix.

References

[edit]

↑ "Changes/yescrypt as default hashing method for shadow". Retrieved 2023-10-10.
↑ "Chapter 5. Issues to be aware of for bullseye". Retrieved 2023-10-12.
↑ "yescript replaces sha512 for password hashing". Retrieved 2023-10-12.
↑ "Arch Linux - Changes to default password hashing algorithm and umask settings". Retrieved 2023-10-10.
1 2 "yescrypt". Retrieved 2023-10-10.

External links

[edit]

Project website

v t e Cryptographic hash functions and message authentication codes
List Comparison Known attacks
Common functions	MD5 (compromised) SHA-1 (compromised) SHA-2 SHA-3 BLAKE2
SHA-3 finalists	BLAKE Grøstl JH Skein Keccak (winner)
Other functions	BLAKE3 CubeHash ECOH FSB Fugue GOST HAS-160 HAVAL Kupyna LSH Lane MASH-1 MASH-2 MD2 MD4 MD6 MDC-2 N-hash RIPEMD RadioGatún SIMD SM3 SWIFFT Shabal Snefru Streebog Tiger VSH Whirlpool
Password hashing/ key stretching functions	Argon2 Balloon bcrypt Catena crypt LM hash Lyra2 Makwa PBKDF2 scrypt yescrypt
General purpose key derivation functions	HKDF KDF1/KDF2
MAC functions	CBC-MAC DAA GMAC HMAC NMAC OMAC/CMAC PMAC Poly1305 SipHash UMAC VMAC
Authenticated encryption modes	CCM ChaCha20-Poly1305 CWC EAX GCM IAPM OCB
Attacks	Collision attack Preimage attack Birthday attack Brute-force attack Rainbow table Side-channel attack Length extension attack
Design	Avalanche effect Hash collision Merkle–Damgård construction Sponge function HAIFA construction
Standardization	CAESAR Competition CRYPTREC NESSIE NIST hash function competition Password Hashing Competition NSA Suite B CNSA
Utilization	Hash-based cryptography Merkle tree Message authentication Proof of work Salt Pepper

v t e Cryptography
General	History of cryptography Outline of cryptography Classical cipher Cryptographic protocol Authentication protocol Cryptographic primitive Cryptanalysis Cryptocurrency Cryptosystem Cryptographic nonce Cryptovirology Hash function Cryptographic hash function Key derivation function Secure Hash Algorithms Digital signature Kleptography Key (cryptography) Key exchange Key generator Key schedule Key stretching Keygen Machines Ransomware Random number generation Cryptographically secure pseudorandom number generator (CSPRNG) Pseudorandom noise (PRN) Secure channel Insecure channel Subliminal channel Encryption Decryption End-to-end encryption Harvest now, decrypt later Information-theoretic security Plaintext Codetext Ciphertext Shared secret Trapdoor function Trusted timestamping Key-based routing Onion routing Garlic routing Kademlia Mix network
Mathematics	Cryptographic hash function Block cipher Stream cipher Symmetric-key algorithm Authenticated encryption Public-key cryptography Quantum key distribution Quantum cryptography Post-quantum cryptography Message authentication code Random numbers Steganography
Category

This cryptography-related article is a stub. You can help Wikipedia by adding missing information.

This page was redesigned at the edge.

See also

References

External links