Cost-Asymmetric Memory Hard Password Hashing. (arXiv:2206.12970v1 [cs.CR])

In the past decade, billions of user passwords have been exposed to the
dangerous threat of offline password cracking attacks. An offline attacker who
has stolen the cryptographic hash of a user's password can check as many
password guesses as s/he likes limited only by the resources that s/he is
willing to invest to crack the password. Pepper and key-stretching are two
techniques that have been proposed to deter an offline attacker by increasing
guessing costs. Pepper ensures that the …

cost hard hashing memory password