Yescrypt: Difference between revisions
Content deleted Content added
No edit summary Tags: Reverted Visual edit |
Rephrase for neutrality and proper reference to names |
||
| (5 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
{{Short description|Password-based key derivation function}} |
{{Short description|Password-based key derivation function}} |
||
{{Promotional|date=January 2026}} |
|||
{{lowercase title}} |
{{lowercase title}} |
||
'''yescrypt''' is a cryptographic [[key derivation function]] |
'''yescrypt''' is a cryptographic [[key derivation function]] used for [[password hashing]] on [[Fedora Linux]],<ref>{{cite web|title=Changes/yescrypt as default hashing method for shadow|url=https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow | access-date=2023-10-10}}</ref> [[Debian]],<ref>{{cite web | title=Chapter 5. Issues to be aware of for bullseye | url=https://www.debian.com/releases/bullseye/mips64el/release-notes/ch-information.en.html#pam-default-password | access-date=2023-10-12}}</ref> [[Ubuntu]],<ref>{{cite web | title=yescript replaces sha512 for password hashing | url=http://skybert.net/debian-linux/yescript-replaces-sha512-for-password-hashing | access-date=2023-10-12}}</ref> and [[Arch Linux]].<ref>{{cite web|title=Arch Linux - Changes to default password hashing algorithm and umask settings|url=https://archlinux.org/news/changes-to-default-password-hashing-algorithm-and-umask-settings | access-date=2023-10-10}}</ref> The function is more resistant to offline password-cracking attacks than [[SHA-2|SHA-512]].<ref name=":0">{{cite web|title=yescrypt|url=https://www.openwall.com/yescrypt | access-date=2023-10-10}}</ref> It is based on [[scrypt]].<ref name=":0" /> |
||
It was designed by [[Alexander Peslyak]], also known as Solar Designer, to be highly resistant to hardware-accelerated brute-force attacks. It features enhanced memory-hardness and "strongly sequential" processing, which reduces the threat of large-scale cracking attempts using GPUs, FPGAs, and ASICs. Attacks that rely on [[Parallel computing|parallelization]] are made more resource-intensive by yescrypt requiring a substantial amount of RAM to compute a single hash. These security benefits and its scalability have led to its adoption as the default password-hashing scheme for several major Linux distributions, where it is identifiable in the <code>/etc/shadow</code> file by the <code>$y$</code> prefix. |
|||
== See also == |
== See also == |
||
Latest revision as of 18:16, 8 March 2026
 | This article contains promotional content. (January 2026) |
yescrypt is a cryptographic key derivation function used for password hashing on Fedora Linux,[1] Debian,[2] Ubuntu,[3] and Arch Linux.[4] The function is more resistant to offline password-cracking attacks than SHA-512.[5] It is based on scrypt.[5]
It was designed by Alexander Peslyak, also known as Solar Designer, to be highly resistant to hardware-accelerated brute-force attacks. It features enhanced memory-hardness and "strongly sequential" processing, which reduces the threat of large-scale cracking attempts using GPUs, FPGAs, and ASICs. Attacks that rely on parallelization are made more resource-intensive by yescrypt requiring a substantial amount of RAM to compute a single hash. These security benefits and its scalability have led to its adoption as the default password-hashing scheme for several major Linux distributions, where it is identifiable in the /etc/shadow file by the $y$ prefix.
See also
[edit | edit source]References
[edit | edit source]- ↑ "Changes/yescrypt as default hashing method for shadow". Retrieved 2023-10-10.
- ↑ "Chapter 5. Issues to be aware of for bullseye". Retrieved 2023-10-12.
- ↑ "yescript replaces sha512 for password hashing". Retrieved 2023-10-12.
- ↑ "Arch Linux - Changes to default password hashing algorithm and umask settings". Retrieved 2023-10-10.
- 1 2 "yescrypt". Retrieved 2023-10-10.
External links
[edit | edit source]
| |||||||||||||||||||||||||||||
 | This cryptography-related article is a stub. You can help Wikipedia by adding missing information. |