yescrypt is a password-based key derivation function based on scrypt.
Advantages (compared to scrypt and Argon2):
- Improved resistance to offline attacks (due to increased attack cost while the defending party's costs remain unchanged).
- Additional functionality (for example, the ability to switch to stronger settings without knowing the password) out of the box.
- Use of NIST-approved cryptographic primitives.
- The ability to use SHA-256, HMAC, PBKDF2, and scrypt remains.
There are also drawbacks, detailed further at the project page.
Since the last update (yescrypt 1.0.1) there have been several minor releases.
Changes in the release 1.0.2:
MAP_POPULATE is no longer used, as newer multithreaded tests found more negative effects than positive ones.
In SIMD code, input and output buffers are now reused in BlockMix_pwxform in SMix2. This may slightly improve cache hit rates and thus performance.
Changes in release 1.0.3:
- In SMix1, indexing of V for sequential writes has been optimized.
Changes in release 1.1.0:
- yescrypt-opt.c and yescrypt-simd.c have been merged, making the '-simd' option no longer available. With this change, the performance of SIMD builds should remain nearly unchanged, but scalar builds should be more efficient on 64-bit architectures (but slower on 32-bit) with a larger number of registers.
yescrypt is now also part of the library libxcrypt, which is used in Fedora and ALT Linux distributions.
Source: linux.org.ru
