GPU attacks on modern password hashes Weaker Stronger PBKDF2-HMAC-SHA-1 PBKDF2-HMAC-SHA-256, sha256crypt PBKDF2-HMAC-SHA-512, sha512crypt scrypt at below 16 MB (misuse) bcrypt (uses 4 KB), scrypt at 16 MB YACoin at 16 MB on GTX TITAN 6 GB is on par with CPU scrypt at 32+ MB yescrypt In native mode with pwxform enabled and non-excessive parallelism