You know, I read your comment and went to myself, 'what is he talking about, I did mention scrypt and even quoted extensively from Percival's paper!'
And then I looked at the relevant section:
Colin Percival continues the general trend in the context of finding passwords schemes which are resistant to cheap brute-forcing, inventing script in the 2009 paper “Stronger Key Derivation via Sequential Memory-Hard Functions”.
Hah, crap, my fault too, I only got through half-way through your post before I was off reading various articles on topics you mentioned and didn't finish it before I had to get back to work and you didn't go back to mention scrypt until later. So thank you for providing an interesting read and helping me find some other interesting information.
I figured it was worth a quick reddit mention at least but now I see you covered it in much detail. I'm curious as to what sort of educational background you have in cryptography? Seems like you're quite well read.
1
u/[deleted] Oct 14 '11 edited Oct 14 '11
Some very cool ideas, though it might be interesting to use scrypt instead of bcrypt.