View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002685 | GNUnet | NSE service | public | 2012-12-06 16:37 | 2013-12-24 19:55 |
| Reporter | Bart Polot | Assigned To | Christian Grothoff | Due Date | |
| Priority | high | Severity | feature | Reproducibility | N/A |
| Status | closed | Resolution | fixed | ||
| Product Version | Git master | ||||
| Target Version | 0.10.0 | Fixed in Version | 0.10.0 | ||
| Summary | 0002685: NSE needs a better proof of work algorithm. | ||||
| Description | The SHA family is too GPU-friendly. It should be substituted for a memory-bound algorithm. Bcrypt seems to fit well, at least for current generation GPUs and implementations: http://www.h-online.com/security/news/item/Password-cracking-in-record-time-with-giant-GPU-cluster-1763322.html Other viable candidate is Scrypt, although seems to be much more novel and not so deeply studied as bcrypt. | ||||
| Tags | No tags attached. | ||||
| We're waiting for a resolution of https://bugs.g10code.com/gnupg/issue1471 | |
| Implemented largely in SVN 26585; only thing remaining is to switch parameters in the KDF call from 'PBKDF2' to SCRYPT once SCRYPT patch hits libgcrypt (see previous note), and to recalibrate the required number of matching bits to make sure the proof-of-work doesn't end up being excessive. | |
| Fixed in SVN 26771. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2012-12-06 16:37 | Bart Polot | New Issue | |
| 2012-12-06 16:37 | Bart Polot | Status | new => assigned |
| 2012-12-06 16:37 | Bart Polot | Assigned To | => Bart Polot |
| 2012-12-06 16:38 | Bart Polot | Summary | NSE need a better proof of work => NSE needs a better proof of work algorithm. |
| 2012-12-21 19:32 | Christian Grothoff | Priority | low => high |
| 2013-03-04 02:52 | Christian Grothoff | Note Added: 0006911 | |
| 2013-03-04 02:56 | Christian Grothoff | Product Version | => Git master |
| 2013-03-22 16:08 | Christian Grothoff | Assigned To | Bart Polot => Christian Grothoff |
| 2013-03-23 20:00 | Christian Grothoff | Note Added: 0007003 | |
| 2013-04-05 11:38 | Christian Grothoff | Note Added: 0007036 | |
| 2013-04-05 11:38 | Christian Grothoff | Status | assigned => resolved |
| 2013-04-05 11:38 | Christian Grothoff | Fixed in Version | => 0.10.0 |
| 2013-04-05 11:38 | Christian Grothoff | Resolution | open => fixed |
| 2013-12-24 19:55 | Christian Grothoff | Status | resolved => closed |