Resumen de Using Spritz as a Password-Based Key Derivation Function

Rafael Álvarez Sánchez, Antonio Zamora Gómez

• Even if combined with other techniques, passwords are still the main way of authentication in many services and systems. Attackers can usually test many passwords very quickly when using standard hash functions, so specific password hashing algorithms have been designed to slow down brute force attacks.Spritz is a sponge-based stream cipher intended to be a drop-in replacement for RC4. It is more secure, more complex and more versatile than RC4. Since it is based on a sponge function, it can be employed for other applications like password hashing.In this paper we build upon Spritz to construct a password hashing algorithm and study its performance and suitability.