yescrypt - scalable KDF and password hashing scheme

submited by

Style Pass

2021-06-25 03:00:08

yescrypt is a password-based key derivation function (KDF) and password hashing scheme. It builds upon Colin Percival's scrypt. This implementation is able to compute native yescrypt hashes as well as classic scrypt. For a related proof-of-work (PoW) scheme, see yespower instead.

Download (current release notes, original release notes): yescrypt 1.1.0 and its signature yescrypt 1.0.3 and its signature

These and older versions of yescrypt are also available from the Openwall file archive. The source code of yescrypt can finally be browsed on GitHub or for now also via CVSweb.

Please check out our presentation slides on yescrypt. (Some of the detail on the last few slides pertains to yescrypt 0.9.x and is no longer valid for yescrypt 1.0+, but overall this slide deck still applies.)

yescrypt is the default password hashing scheme on recent ALT Linux, Debian testing, and Kali Linux 2021.1+. It is also supported in Fedora 29+ (and is recommended for new passwords in Fedora CoreOS) and in Ubuntu 20.04+.