Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/alisianoi/lyra2-java
Subset of Lyra2 password hashing
https://github.com/alisianoi/lyra2-java
cryptography hash-algorithm password
Last synced: 24 days ago
JSON representation
Subset of Lyra2 password hashing
- Host: GitHub
- URL: https://github.com/alisianoi/lyra2-java
- Owner: alisianoi
- License: mit
- Created: 2017-07-11T17:53:40.000Z (over 7 years ago)
- Default Branch: main
- Last Pushed: 2022-12-14T20:44:50.000Z (almost 2 years ago)
- Last Synced: 2024-04-16T02:04:11.437Z (7 months ago)
- Topics: cryptography, hash-algorithm, password
- Language: Java
- Homepage:
- Size: 733 KB
- Stars: 3
- Watchers: 4
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# [Lyra2][3]: a password hashing scheme
[](https://travis-ci.org/alisianoi/lyra2-java)
[](https://coveralls.io/github/alisianoi/lyra2-java)
[](http://search.maven.org/#artifactdetails|com.github.all3fox|lyra2|1.3|lyra2)
[](https://www.javadoc.io/doc/com.github.all3fox/lyra2)
[](https://raw.githubusercontent.com/alisianoi/lyra2-java/master/LICENSE)
> Lyra2 is a password hashing scheme (PHS) based on cryptographic
sponges. It was designed to be strictly sequential (i.e. not
easily parallelizable), to provide strong security even against
attackers who use multiple processing cores (e.g. custom hardware
or powerful GPUs). At the same time, it is very simple to implement
in software and allows legitimate users to fine tune their memory and
processing costs according to the desired level of security against
brute force password guessing. Lyra2 is an improvement of the
previously proposed Lyra algorithm which provides an even higher security
level against different attack venues and overcomes some
limitations of its predecessor and other existing schemes.
[Paper in the Cryptology ePrint Archive][2] and [a reference implementation in C][1] by:
*Marcos A. Simplicio Jr., Leonardo C. Almeida, Ewerton R. Andrade, Paulo C. F. dos Santos and Paulo S. L. M. Barreto*
This repository is a spin-off implementation in Java by me, Aleksandr Lisianoi, as part of my Bachelor's thesis at TU Wien.
# How to compile and run?
```
git clone https://github.com/alisianoi/lyra2-java.git
cd lyra2-java
mvn package
```
After maven packages the project, you can run it like so:
```
java -jar ./target/lyra2-*-with-dependencies.jar password salt 3 3 3
```
You can get help about command line switches with `--help`:
```
java -jar ./target/lyra2-*-with-dependencies.jar --help
```
# How to run tests?
```
mvn test
```
The unit tests cover three configurations of Lyra2:
1. Memory matrix of size `mcost * blocks * columns`, where:
`mcost` is a dynamic parameter and `blocks = 12` and `columns = 256`
1. The `sponge`'s are set to either `blake2b`, `blamka` or `half round blamka`
1. For all sponges, `half-rounds = 12` and `full-rounds` depends on the sponge
1. The mode of Lyra2 operation is single-threaded
Note: every parameter, except for mode of operation, can be changed
(output length, `blocks`, `columns`, `half-rounds`, etc.) but you will
also have to provide a data file that would hold the correct hash for
that combination of parameters. See `tests/resources` for file format.
The resulting hash is byte-level compatible with the [original C
implementation][1]. It means that if you match the build- and runtime
parameters and supply the same password/salt and desired output
length, you will get the same hash as output.
[1]: https://github.com/leocalm/Lyra
[2]: https://eprint.iacr.org/2015/136
[3]: http://lyra-2.net/
[4]: https://en.wikipedia.org/wiki/Lyra2