> Argon2i is more vulnerable to tradeoff attacks due to its data-independent addressing scheme. We applied
the ranking algorithm to 3-pass Argon2i to calculate time and computational penalties. We found out that the
memory reduction by the factor of 3 already gives the computational penalty of around 214. The 214 Blake2b
cores would take more area than 1 GB of RAM (Section 2.1), thus prohibiting the adversary to further reduce
the time-area product. We conclude that the time-area product cost for Argon2d can be reduced by 3 at best.
> Argon2i is more vulnerable to tradeoff attacks due to its data-independent addressing scheme. We applied the ranking algorithm to 3-pass Argon2i to calculate time and computational penalties. We found out that the memory reduction by the factor of 3 already gives the computational penalty of around 214. The 214 Blake2b cores would take more area than 1 GB of RAM (Section 2.1), thus prohibiting the adversary to further reduce the time-area product. We conclude that the time-area product cost for Argon2d can be reduced by 3 at best.