Bad Directions In Cryptographic Hash Functions

A 25-gigabyte "point obfuscation" challenge "using security parameter 60" was announced at the Crypto 2014 rump session; "point obfuscation" is another name for password hashing. This paper shows that the particular matrix-multiplication hash function used in the challenge is much less secure than previous password-hashing functions are believed to be. This paper's attack algorithm broke the challenge in just 19 minutes using a cluster of 21 PCs.