bryant / argon2rs

The pure-Rust password hashing library running on Argon2.
MIT License
174 stars 19 forks source link

Documentation suggests 2i is safer #26

Open PAStheLoD opened 7 years ago

PAStheLoD commented 7 years ago

Hello,

This is sort of a question and a bug report at the same time.

As far as I know 2d should be ignored, and 2id used/recommended instead, as that has both GPU and side-channel attack resistance.

2i lacks the memory dependence, thus it's easily parallelizable (so less GPU attack resistance).

Could someone clarify this? (Basically the question is, does 2id suffers more from it being both data dependent, thus sort of "side-channel attack"-able, than gain from being data dependent, thus more GPU attack resistant?)