password-hashes
password-hashes copied to clipboard
RustCrypto
Password hashing functions / KDFs
The function produce_byte_seq() will cause an index out of bounds panic if the password supplied to sha512_crypt has a length larger than 64 bytes.
Hey all 👋 I've been using the scrypt package from RustCrypto in a project but recently I hit a small roadblock since I can't seem to find any way of...
I've faced with an issue when i need dynamically specify the output length of scrypt function. With current state of your crate it's not possible because in `Params::new` there is...
Practically a rewrite of the argon2 crate. Summary of changes: - Parallel implementation is safer by not creating mutable aliases of `self`, but instead separating lanes into a mutable slice...
- [x] [Argon2](https://en.wikipedia.org/wiki/Argon2) - [x] [Balloon](https://crypto.stanford.edu/balloon/) - [ ] ~~[bcrypt](https://en.wikipedia.org/wiki/Bcrypt)~~ (see [rust-bcrypt](https://github.com/Keats/rust-bcrypt/issues/10) crate and [this comment](https://github.com/RustCrypto/password-hashes/issues/1#issuecomment-473003766)) - [ ] [Lyra2](https://en.wikipedia.org/wiki/Lyra2) - [x] [scrypt](https://en.wikipedia.org/wiki/Scrypt) - [ ] [yescrypt](https://www.openwall.com/yescrypt/) Also see algorithms...
I'm not sure to what degree this is expected, but if I enable the `std` feature in argon2, it pulls in a random number generator via `getrandom`. This is unfortunately...
Currently, the documentation https://docs.rs/argon2/0.3.2/argon2/struct.Params.html#method.data claims that: > This field is not longer part of the argon2 standard (see: https://github.com/P-H-C/phc-winner-argon2/pull/173), and should not be used for any non-legacy work. But I...
The `argon2` crate presently vendors its own implementation of the BLAKE2b round function for the core of the Argon2 KDF implementation: https://github.com/RustCrypto/password-hashes/blob/58bc6dd/argon2/src/block.rs#L100-L186 Ideally it'd be able to leverage an implementation...
Please clarify in the README's why this crate is recommended for passwords. This surprises me especially as this crate, as far as I know, doesn't support pepper. Therefore, I am...
**WARNING: Do NOT merge yet; discussion is required.** ## Overview Hello! This is my first contribution to this project. I hope it is helpful. I welcome comments and am happy...
