Overview of the Candidates for the Password Hashing Competition - And their Resistance against Garbage-Collector Attacks.
Christian Forler, Eik List, Stefan Lucks, Jakob Wenzel · 2014
Abstract. In this work we provide an overview of the candidates of the Password Hashing Competition (PHC) regarding to their functional-ity, e.g., client-independent update and server relief, their security, e.g., memory-hardness and side-channel resistance, and its general proper-ties, e.g., memory usage and flexibility of the underlying primitives. Fur-thermore, we formally introduce two kinds of attacks, called Garbage-Collector and Weak Garbage-Collector Attack, exploiting the memory management of a candidate. Note that we consider all candidates which are not yet withdrawn from the competition.