mruby-bcrypt

OpenBSD-style Blowfish-based password hashing.

It's essentially a port of BCrypt, the popular Ruby gem; the API is not 100% the same, but if you don't pass it garbage you'll receive good, compatible results.

Dependencies:

• a regular expression engine (tests are run with mruby-onig-regexp and mruby-regexp-pcre);
• /dev/urandom (as last resource; see mruby-sysrandom's doc).

Installation

Add the usual conf.gem block to build_config.rb (you MUST specify the regular expression engine):

MRuby::Build.newdo |conf|
# ...conf.gem:github=>'baldowl/mruby-bcrypt'do |c|
# this c.add_dependency'mruby-regexp-pcre',:github=>'iij/mruby-regexp-pcre'# or this# c.add_dependency 'mruby-onig-regexp',# :github => 'mattn/mruby-onig-regexp'# or this# c.add_dependency 'mruby-regexp'endend

Examples

> hashed_password=BCrypt::Password.create('plain text password')=>#<BCrypt::Password:0x7f835a8248f0>
> putshashed_password
$2b$10$J8kaghfcC2/A4gV1ZCkh9eALLr7jZNSrOG9woBaYsdDahg1iRpe3C=>nil
> hashed_password.version=>"2b"
> hashed_password.cost=>10
> hashed_password.salt=>"$2b$10$J8kaghfcC2/A4gV1ZCkh9e"
> hashed_password.checksum=>"ALLr7jZNSrOG9woBaYsdDahg1iRpe3C"
> hashed_password == 'plain text password'=>true
> hashed_password == 'clearly not my password'=>false

License

This code is released under the MIT License: see LICENSE file.

C implementation of the BCrypt algorithm by Solar Designer and placed in the public domain. You can find the original code of crypt_blowfish-1.3, downloaded from http://www.openwall.com/crypt/ on 2015-02-28, in src/crypt_blowfish.

BCrypt Ruby gem has been written by Coda Hale coda.hale@gmail.com and released under the MIT License.