Password Hashing - The Future is Now

Explore the critical issue of password hashing in this Black Hat USA 2013 conference talk. Delve into the challenges of protecting passwords across various systems and the limitations of existing solutions. Learn about the roadmap towards improved hashing methods, including technical challenges for software engineers, security experts, and cryptographers. Discover the Password Hashing Competition (PHC) initiative, which brings together leading experts to develop future-proof hashing techniques. Gain insights into topics such as parallelism in password hashing, complexity theory applications, performance metrics for GPUs and ASICs, client-server hashing considerations, and DoS mitigation strategies. Understand the evolution of password protection from early cryptographic hashes to modern solutions like scrypt, and explore the concept of updatability in password hashing schemes.

Intro
We have a problem
Protecting passwords
Crypto hash (early 1970's)
scrypt (Percival, 2009)
Is scrypt user-friendly?
The Password Hashing Competition (PHC)
Crypto research
Updatability