OpenBSD-style Blowfish-based password hashing.

It's essentially a port of BCrypt, the popular Ruby gem; the API is not 100% the same, but if you don't pass it garbage you'll receive good, compatible results.

Dependencies:

a regular expression engine (tests are run with mruby-onig-regexp and mruby-regexp-pcre);
/dev/urandom (as last resource; see mruby-sysrandom's doc).

Installation

Add the usual conf.gem block to build_config.rb (you MUST specify the regular expression engine):

MRuby::Build.new do |conf|
  # ...
  conf.gem :github => 'baldowl/mruby-bcrypt' do |c|
    # this 
    c.add_dependency 'mruby-regexp-pcre',
      :github => 'iij/mruby-regexp-pcre'
    # or this
    # c.add_dependency 'mruby-onig-regexp',
    #   :github => 'mattn/mruby-onig-regexp'
    # or this
    # c.add_dependency 'mruby-regexp'
  end
end

Examples

> hashed_password = BCrypt::Password.create('plain text password')
 => #<BCrypt::Password:0x7f835a8248f0>
> puts hashed_password
$2b$10$J8kaghfcC2/A4gV1ZCkh9eALLr7jZNSrOG9woBaYsdDahg1iRpe3C
 => nil
> hashed_password.version
 => "2b"
> hashed_password.cost
 => 10
> hashed_password.salt
 => "$2b$10$J8kaghfcC2/A4gV1ZCkh9e"
> hashed_password.checksum
 => "ALLr7jZNSrOG9woBaYsdDahg1iRpe3C"
> hashed_password == 'plain text password'
 => true
> hashed_password == 'clearly not my password'
 => false

License

This code is released under the MIT License: see LICENSE file.

C implementation of the BCrypt algorithm by Solar Designer and placed in the public domain. You can find the original code of crypt_blowfish-1.3, downloaded from http://www.openwall.com/crypt/ on 2015-02-28, in src/crypt_blowfish.

BCrypt Ruby gem has been written by Coda Hale coda.hale@gmail.com and released under the MIT License.