Lyra: password-based key derivation with tunable memory and processing costs
Lyra: password-based key derivation with tunable memory and processing costs
复制标题
Lyra：基于密码的密钥派生，内存和处理成本可调
DOI：
10.1007/s13389-013-0063-5
复制
发表时间：
2014
影响因子：
1.9
通讯作者：
M. Simplício
中科院分区：
文献类型：
--
作者：
Leonardo C. Almeida;Ewerton R. Andrade;Paulo L. Barreto;M. Simplício
我们提出了基于密码海绵的基于密码的密钥推导方案，lyra被设计为严格的顺序（即，不容易平行），即使使用使用多个处理核心的攻击者也提供了强大的安全性（例如GPU）。 - ART解决方案，表明我们的建议如何提供更高的安全级别并克服现有方案的限制，我们表明，如果我们修复了Lyra的总处理时间\ DocumentClass [12pt] {Minimal} \ usepackage usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$t $$\结束{文档}在合法平台中，对算法的无内存攻击的成本是指数的，而文献中最著名的结果（即针对Scrypt算法）是相同的相同的。处理时间，Lyra允许比其对应物更高的记忆使用情况，从而进一步增加了蛮力攻击的成本。
We present Lyra, a password-based key derivation scheme based on cryptographic sponges. Lyra was designed to be strictly sequential (i.e., not easily parallelizable), providing strong security even against attackers that use multiple processing cores (e.g., custom hardware or a powerful GPU). At the same time, it is very simple to implement in software and allows legitimate users to fine-tune its memory and processing costs according to the desired level of security against brute force password guessing. We compare Lyra with similar-purpose state-of-the-art solutions, showing how our proposal provides a higher security level and overcomes limitations of existing schemes. Specifically, we show that if we fix Lyra ’s total processing time t\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$t$$\end{document} in a legitimate platform, the cost of a memory-free attack against the algorithm is exponential, while the best-known result in the literature (namely, against the scrypt algorithm) is quadratic. In addition, for an identical same processing time, Lyra allows for a higher memory usage than its counterparts, further increasing the cost of brute force attacks.