From e14d1d1c5c622a177241c3034f9cd4e192d2228a Mon Sep 17 00:00:00 2001 From: Drew DeVault Date: Wed, 25 Nov 2020 14:21:56 -0500 Subject: [PATCH] Remove hashcat comparison I was mistaken about the issues with generating tokens in advance. The main advantage is then just that argon2id is much better than sha1 for this use-case. --- README | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/README b/README index c426a01..4cdb8ab 100644 --- a/README +++ b/README @@ -58,18 +58,6 @@ To verify the proof, simply run the proof algorithm with the original challenge parameters and the challengee's provided password and verify that the resulting hexadecimal string is prefixed with the appropriate number of zeroes. - Comparison with hashcat - -mkproof offers some advantages over hashcat: - -- Because Alice provides a string which is part of the input to the hashing - function, it is not possible to generate lots of proofs in advance. -- The use of argon2i makes it difficult to scale up proofs by being resistant - to GPU generation and having a fixed memory cost. - -Of course, both of those things may be desirable for your application, in which -case hashcat is probably better for you. - Notes The defaults are tuned to take about five minutes on one core of a modern