[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Scrypt security proof weakness?




Scrypt uses Salsa and SHA-256, correct? Given that SHA-256 is an
incremental hashing function, wouldn't a work around for the memory
hardness would be to compute each 512-bit block generated by Salsa at one
time before hashing it, thus reducing memory requirements to about a
kilobyte?