References

This page provides links to further information related to password hashing and password strength.

Password hashing

Argon2

• Argon2 IETF draft guidelines
• Argon2 reference implementation
• Password Hashing Competition

Bcrypt

• A future-adaptable password scheme

Pbkdf2

• Pbkdf2
• Key stretching

Password strength

• NIST digital authentication guideline
• Choosing secure passwords
• Writing down passwords
• From very weak to very strong: Analyzing password-strength meters

User attitudes / user compliance

• User attitudes to password policies
• Unusable password policies
• How does your password measure up: the effect of strength meters on password creation

Password managers

• The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers
• Password managers: attacks and defenses